@scrottie@anarchism.space I could see email server coupled with webfinger server. When alice send an email to bob, alice's email server pull bob's public certificate from bob's webfinger server, encrypt the email with bob's public certificate, stamp it with alice private key and send the email. Bob is more paranoid so the server will pull alice's public certificate from her webfinger server, authenticate the stamp and store the encrypted email. Then bob's email client which has the key can unencrypt.