[Bolas]

and use a JavaScript (client side) on the fly decryption?
I think something like a public and private password: RSA?

public password is stored in database, so anyone can crypt the message using adressee public pass.

When the message is ready to be decrypted and the user open it, a javascript prompt ask him the private password.
Then a function will decrypt client side the crypted message.