[sirdogealot]

But when displaying the cleartext of a previously sent email or received email... they must be able to decipher the encrypted text in order to display it to the viewer, no?

[lmm]

Sure, the extension can read the encrypted text from the DOM. But it then displays it in an iframe which the original site doesn't have access to.