> If you're taking votes ... OPTION 2 looks good 

Ditto.

# * Intact pen Only appears when the message is signed, either per
#   Preferences or per this message only (Options menu). 
# * Only show the broken pen when the user wants to send this message
#   signed but can't for some reason (is this a valid scenario?). 
# * Show No pen icon at all if signing is turned off (user not 
#   interested, don't annoy them with it).  
# * The lock icon as closed when the message can be sent encrypted 
#   and encryption is turned on.  
# * Open lock when message can't be sent encrypted and encryption 
#   is turned on.  
# * No lock if encryption is not turned on. 

I like this.

The only difference I'd suggest is that instead of no pen and/or no lock
(to indicate the option is not selected), I'd put a greyed-out pen
and/or lock.  This seems to indicate "deselected" more strongly, and is
more discoverable.

Reply via email to