Google&#x27;s also had a positive impact on TLS usage in email: <a href="https:&#x2F;&#x2F;www.google.com&#x2F;transparencyreport&#x2F;saferemail&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.google.com&#x2F;transparencyreport&#x2F;saferemail&#x2F;</a><p>TLS for email is still in pretty bad shape but it&#x27;s getting better. (Funny, I just noticed that Google&#x27;s page says &quot;Safe Browsing&quot; while only &quot;Safer Email&quot;.) I know you&#x27;re not a fan of DNSSEC, but something like Secure SMTP via DANE is probably needed for meaningful improvement: <a href="https:&#x2F;&#x2F;tools.ietf.org&#x2F;html&#x2F;draft-ietf-dane-smtp-01" rel="nofollow">https:&#x2F;&#x2F;tools.ietf.org&#x2F;html&#x2F;draft-ietf-dane-smtp-01</a> (though it won&#x27;t help with the chicken-and-egg problem of domain ownership validation by email)