Rick,

128 bit https encryption is limited by export laws which confuse the hell out of me, but according to Network Associates PGP encrypted files are exportable. Plus you won't incur the overhead of sending / recieving encrypted files via a web server which can take a lot of overhead. PGP is complex and lower levels of encryption are available that provide good protection. Network Associates has international versions of their tool kit available that could be used to integrate PGP into their applications if an absolute gurantee of security is required.

Robert Horkay