While I understand Sae5waip's list of put-me-downs, I can't really sympathise with it. A lot of the usability problems boil down to two things, namely * UI/U

While I understand Sae5waip's list of put-me-downs, I can't really sympathise with it. A lot of the usability problems boil down to two things, namely * UI/UX, along with proper client integration * Discoverability and bootstrapping of the web of trust Make it easy to discover users' PGP/GPG keys, and trivially easy to use them. Integrate GPG-agent or something with similar functionality so users do not have to type their passphrases all the time. Then start with sign-by-default policy for all outgoing mail, and add a simple way to show the distinction in the mail client UI. Remember when browsers started to show the green locks in URL bars? It wasn't a panachea, but it at least made things less awful. Now... I'm not saying it would be easy, and I certainly don't have enough hubris to claim that I could be able to design a solid, end-user friendly PGP system by myself. But I sure as hell would love to be involved in building one. I try to imaging what the world would be if Google provided a globally reachable and easily integrated (on client side) PGP key server pool. EDIT: bulletpoint appearance