It's best done at Google or at your email client. Anything elsewhere (e.g., at a browser) will suffer the same fate as FireGPG. I don't see Google ever doing it for Gmail -- normal people don't care about encrypting their emails, and Google will not want to risk losing the ability to show context-sensitive ads.
