Hi Robert!
Yes, of course I had the encryption on my mind already, that’s why there an X-OpenPGP-Type (which currently it’s fixed to [S]ign) header is added by Enigform. Of course, the problem is that the webserver’s gpg has to get the passphrase so it can decrypt the request, and that’s what I need to analyze yet.
Thanks for your comments!!
