[eru]

But PGP gives the wrong guarantees.

[mike-cardwell]

Yes and no. Depending on what "guarantees" you're looking for.

[eru]

If the author of the root comment wants something like "OTR for Facebook" they probably wouldn't like the guarantees that PGP gives.

But Facebook and privacy don't mix anyway.