On 9/6/13 5:11 AM, Phillip Hallam-Baker wrote: > S/MIME is almost what we need to secure email. What is missing is an > effective key discovery scheme. We could add that and add Ben Laurie's > Certificate Transparency and have a pretty good start on a PRISM Proof > email scheme. Not when the keys reside with a service that can be coerced. Eliot