definitely! the current thinking in the community is to do messaging by [sending a webmention to someone’s home page](http://indiewebcamp.com/indieweb-messaging). i don’t know if many people have thought about encryption yet, but you could easily put a GPG-encrypted message in the body of the post. PKI is left as an exercise for the reader. :P