Mailpile – taking e-mail back
How many times do people have to say this:<p><i>There is no such thing as secure email. Assume everything is being read.</i><p>You can't bolt security on (SSL, mailbox encryption, PKI). You have to design it in from the start. SMTP/IMAP etc have crudely hacked on TLS implementations which aren't even guaranteed to be operational site to site. PGP is just an encapsulation which is rarely used.<p>It's a mess.<p>This is just a repackaging of the pile of hacks.<p>We need to start again and do it properly and consider: encryption, modern content encapsulation (better than mime), authentication, PKI, secure storage, mandatory authentication/authorisation and SPAM control.