Ordering, pgp, questions. How bad did I screw up?

Submitted order (1gram sand) with vendor on agora who had a history of about 100 transactions over past twelve mos. Submitted address and a question via pgp. Received a follow-up message on wall to the effect of "order shipped, yes, can do that...please make sure public key is on profile to ensure private communication in the future."

Since then I realized that vendor also had profile on BlueSky. Ok, I screwed up. Please be nice.

1) I know that there are plenty of vendors with prior histories on both SR2 and Agora (e.g. Apollonian) who are still rolling along on Agora, so I'm hoping I didn't make the blunder of the year by ordering with someone who was doing business on BlueSky. Again though, I verified prior activity on Agora...thoughts?

2) in the past I have always submitted address via pgp and almost always received vendor confirmatory messages on wall (i.e. "Went out today...look for...") even when I did have my public key in profile. I always assumed this was normal...So is this normal? If not, well-know vendors have been committing stupid mistakes with me...

If it matters, it's one gram of sand going thru first class mail with no tracking number...

Again, please be nice. I realize nobody here can say "you're fine, nothing will ever happen!" On the other hand I'm hoping that I haven't set myself up for "noob target of the year." Slinking away with tail between legs..

Hoping to get at least three hours of


Comments


[4 Points] None:

[deleted]


[3 Points] TheAuth0r:

What? Too convoluted.


[1 Points] NIGGATR0N:

You're gonna be fine.


[1 Points] sapiophile:

You can always paste your GPG Public Key into your initial encrypted message to them.


[1 Points] Theeconomist1:

Most of the replies I get from vendors are unencrypted. As long as it doesn't contain personal info you are fine. I don't think that matters too much. Let's say the worst situation, the only way LE would see that message is if they seized the marketplace. Regardless, they already have the transaction in the database for your username. There is no more info to be gleaned from that unencrypted reply. So it doesn't really matter. I don't think you screwed up and your risk is no greater than if the reply was encrypted.

That being said, its good practice to have your public key available should the vendor prefer OR should the message be sensitive enough to encrypt. As long as your address/name were encrypted, your fine.

Enjoy your sand!