I wasn't trying to discuss whether or not PGP is a good or widely used technology. My point was that even if something like it were widely adopted and made seamless, it would not be able to solve the problem of bootstrapping the verification connections without eventually become social media itself.