S/MIME on the other hand is supported by majority of common email clients. PGP sucks in other (cryptographic) ways as well. What's difficult is long-term key m

S/MIME on the other hand is supported by majority of common email clients. PGP sucks in other (cryptographic) ways as well. What's difficult is long-term key management. This is being solved in the context of Passkeys and the same infrastructure could be used for S/MIME keys. Provisioning should become significantly easier with ACME for S/MIME, we'll see about that though. Nothing really says it has to be difficult, even for the layperson.