I agree with subStrata's point about not having to download the PGP message. I double hopped VPN's but I still almost didn't click the download on the PGP confirmation message. If there is a way to display it or even make a specialized TOR page address display that message so that you don't need to open yourself up to network vulnerabilities that would be an improvement.