I think it's a mistake to think that you need a "secure e-mail provider". You can't trust third parties, so we need trustworthy clients and a robust PKI. Then,

I think it's a mistake to think that you need a "secure e-mail provider". You can't trust third parties, so we need trustworthy clients and a robust PKI. Then, as far as content goes, you can use NSA-spy-mail.gov.ru for your e-mail provider and it won't matter. For metadata, I don't know that there's a good solution using the existing e-mail infrastructure. Maybe some sort of onion-style remailer could be put in place, but again, you can't just trust that lavaboom will be able to throw away that information even if they were the only ones who were capable of gathering it.