Re: Commercial PGP: Verifying Trustworthiness