The solution that provides strong security is end-to-end encryption. This is how Signal works, the product that Moxie built: https://en.wikipedia.org/wiki/Signa

The solution that provides strong security is end-to-end encryption. This is how Signal works, the product that Moxie built: https://en.wikipedia.org/wiki/Signal_(software) https://en.wikipedia.org/wiki/Signal_(software) Levison's follow-up project DarkMail also works in a similar way while focusing on email: https://darkmail.info/ https://darkmail.info/ Although I don't have a great opinion of Lavabit, I have skimmed the technical documentation for DarkMail and it does appear to solve the problem properly and to make up for the deficiencies in Lavabit. It's not backwards-compatible with existing email, while being secure, though, so it wouldn't automatically upgrade the security of webmail. It's very difficult to secure web-based email any better than the major name-brand providers already do. DarkMail will work, but it requires a new protocol layered on top of email that handles key exchange and opportunistic end-to-end encryption.