[rorrr2]

And where's the key stored on the client and how is it shared with the server?

I'm too lazy to parse their JS code.

[mschuster91]

You don't need a private client key for just encryption, the public key of the recipient is sufficient.

For signing, you'd need a pub/priv keypair, but this is not implemented here.

[alternize]

   $.get("/static/pgpkey", function (key) { 
      // store key
      // hook to submit button click event & encrypt before submit
   });

for the pgp encrypting he's using http://openpgpjs.org/