Great points, I'd view privacy to be a key ingredient to make something like this work. I don't like built in phishing protection browser capabilities for this

Great points, I'd view privacy to be a key ingredient to make something like this work. I don't like built in phishing protection browser capabilities for this same reason. Also great points about being a drop in the bucket... I asked a similar question tonight "Ask HN: Why don't companies sign email the way we do with HTTPS?" https://news.ycombinator.com/item?id=9098079 https://news.ycombinator.com/item?id=9098079 It seems even the basic security measures we think are "good" really have no acceptable level of traceability, wide-spread visibility or audibility.