There are reasonable ways to encrypt email, we just don't have them. PGP is not it, and I think PGP is at least partially responsible for actual working soluti

There are reasonable ways to encrypt email, we just don't have them. PGP is not it, and I think PGP is at least partially responsible for actual working solutions never materializing. The PGP developers are too paranoid to develop a system that actually works. The web of trust is ridiculous overkill for most users, and should have been an option for really paranoid people, not the default. But because of the web of trust there is no good official scalable way to transfer public keys and thus the whole system doesn't work. Really it should have been integrated into DNS with a MXKS record that points at the keyserver for a domain or something similar. There could even be a default for domains without the MXKS record that you can fall back to (use MX server on a well known port). The keyservers could be verified the same way we verify HTTPS, which is the part where we drop web of trust into the dumpster and switch to a system that has already proven to be scalable and safe enough for regular users. All of this could be seamlessly integrated into mail clients. If you are worried that your keyserver will leak your email addresses you can have it return bogus key material for addresses that don't exist.