Agreed. The entire PKI and email system needs to be re-thought, however, going down that road starts conversations about TPM, secure O/Ss (with government backdoors)... Maybe a better way to approach this is to have a secure email system then.. oh, that's right, *cough* lavabit *cough*. However, I do agree with you. The system need to be baked into tools used every day, browsers, email agents, phones ... and now we are back at the first point. sigh...

I know of another example: http://www.ed.csm.com.au/edmail.html This is a commercial product used by the South Australian Education System, the company who `created` the product is actually using a reskinned SquirrelMail, talk about being unethical and untruthful to your customers (especially >$2mAU contracts.....), may the slashdot effect can rustle some feathers........