I have no comments , but a lot of organizations have poor security practice when delivering private-keys.
Unless the private-key where secured via AESencryption and a strong passphrase, than they did a very wrong action with sending private-keys via EMAIL.
NSE ( network security expert) and Route/Switching Engineer
kfelix -----a----t---- socpuppets ---dot---com
=( @ @ )=