> The SSL is the only thing keeping away low and average level attacks easily. The password is meant to authenticate the user to the server; the user is meant

> The SSL is the only thing keeping away low and average level attacks easily. The password is meant to authenticate the user to the server; the user is meant to authenticate to other users through the use of PGP. In theory it shouldn't be too big a deal to lose control of your password, because your emails should all be encrypted. (Though theres certainly a lot of metadata that someone with your password could glean that you'd much rather they didn't.)