I imagine that it'll be something involving browser-JS-baked PGP and an optional client-side driven indexing service (like a Sphinx search agent running in the task bar.) It'll weave in some sort of "Hey, you're emailing a service provider that doesn't support PGP enforcement - supply recipients public key, send unsecured message, or ask them to switch to MegaMail?"