PGP Required?

Won't that prove to be something of a major restriction, given the relatively small number of actual PGP users? Wouldn't a search against the email addresses of NIC handles given in whois responses or those in DNS SOA records provide a larger sample of people? Seems to me though that the people most likely to be affected are in a technical role, so with a bit of luck are less likely to fall for the scams intended for them.

Cheers,

Sabahattin