Comment: Re:https does not mean they are stored encrypted (Score 1) 251
Well, that plus the fact that by sending an unencrypted email that is stored on the mail servers of an unknown number of ISPs and mail forwarders, they are (probably) violating the privacy notice that says they are only sharing his data with affiliated parties, government, etc.
I was going to suggest S/MIME backed by certificates issued by a low-cost/free certificate authority (this would be a good service for the Open ID foundation or Amazon to get into, since they already have a widely-used SSO service), but based on the discussion above, that solution isn't 100% reliable, so I'd like to hear some ideas that:
* are easy for stupid/lazy/cheapskate users and merchants to use
* guarantee authentication (signing) and encryption, excluding the message routing. I'm not proposing a mail anonymizer service.
It would also help if gmail would implement this as a feature. They're big enough they could act both as certificate authority and mail server.