Weakness of the PGP scheme ?