Cybersecurity

Well spoken!

These are some reasons I hate email, just clearly articulated instead of mumbled curses, for instance

People used to argue email can't be fixed because it's ubiquitous and there would never be a flag day where everyone changed to a new protocol.

That has changed. Now 90% of email comes from a big 3 providers, gmail, Microsoft, whoever. They could implement protocol changes and everyone else would be forced to follow.

The second thing is you could just add a v2 header and include some backword compatibilty.

Things email is desperately missing: Attestable records. Anyone can append anything anywhere INA message. Breaking DKIM all the time.

Rather than that they need to make the format append only. Each new part can add headers that are signed by the forwarding node but they can't tocuh the original message.

At that point you still wouldn't know if you could trust the originating mailserver or mail agent, but you could at least be sure of who the originator was, and it allows you to establish trust based on that (with further things like deferred emails for untrusted senders using something like postgrey, but with better support due to trusting keys rather than domain addresses)

The problem then becomes forcing the big three to implement changes that rock the boat for them.

People have largely accepted spam as a fact of life on email and shifted conversations to less infested platforms.

The other problem is the obvious one that no matter what technical solution you come up with it'll be ruined in 24hrs by spammers.

I think these just make sure the sender registered a domain and may even be held accountable, because they had to pay for it and put contact info. If an attacker hijacks a device that isn't meant to send mail, they can't use it for spamming, as they also need DNS control.