We've got to get better at securing email, and I've been really impressed with protonmail (not currently using them myself though). Consider Gmail, they send 2

We've got to get better at securing email, and I've been really impressed with protonmail (not currently using them myself though). Consider Gmail, they send 20% of outbound email as clear text and 4% inbound is unencrypted[1]. Of the encrypted email, it's unclear how much actually validates DNSSEC/DANE or a trustworthy CA and refuses to send when these are missing. Encryption on email is generally about as secure as using http:// http:// for 20% of your web browsing and ignoring certificate errors when you use https:// https://. We tolerate it because email clients generally don't warn end users when this happens and there's not much we can do without harming delivery. Worrying about legally compelled metadata sharing misses the larger context email operates in. [1] https://transparencyreport.google.com/safer-email/overview?hl=en https://transparencyreport.google.com/safer-email/overview?h...