Have we all forgotten PGP already? (Not an API, but certainly not a "physical good")