Remind me again

Why don't websites use public keys for authentication instead of passwords?

>>20

Just like how every forward secrecy scheme does.

no, most forward secrecy schemes use symmetric session keys and mid-to-long-term priv/pub keypairs which are generated relatively rarely

Which means that you can perform DHKE when you use gpg over http.

is it still PGP when it's synchronous and includes DHKE? introduction of DHKE alone makes it a different protocol IMO because it won't be compatible with normal PGP