Why do sites ask for our private posting key?
Would it not be more ideal that we sign something with our private posting key
without giving out our private key? They could then decrypt using our public key.
Why have a private key if everyone wants you to share it with them?