Yeah I think you're right, a form of end-to-end wouldn't be too hard. But it would only protect against passive attacks by your provider. It wouldn't protect a

Yeah I think you're right, a form of end-to-end wouldn't be too hard. But it would only protect against passive attacks by your provider. It wouldn't protect against active attacks by your provider. Your provider could issue itself a new cert for you and your correspondent and then intercept the messages. It's certainly an improvement over what we have now though.