Web application security paranoia style

Conceptual description of using GPG for web application security (authentication). The solution sketched seems a bit cumbersome, but it might be useful for applications that deal with very sensitive data.