When I send an email to somebody, I want to know that it has arrived, and I want to know that the only person that can read it is the recipient.
When I receive an email from somebody, I want to know that it definitely came from them.
We have SPF, DKIM and OpenPGP (all of which I use). The problem is, mail servers accept mail from domains that don't use SPF and DKIM, and more importantly, other people don't use OpenPGP.
You could safely mail me, though. We use the same stack you do, plus DANE for advertising the fingerprint of the certificate to make sure the connection to the mail server is not MitM-ed. And (open)DMARC for giving feedback to mail origins about what (malicious) traffic tried to send from their domain.
Well, the technology is there and works as advertised. It is just getting people to adopt, and since people depend on hosting companies hosting companies need to upgrade. That hasn't happened. Ever. But it is not the failure of email, I would say, but a failure of the internet ecosystem that is incapable of upgrading itself because of its fragmentation.
When I send an email to somebody, I want to know that it has arrived, and I want to know that the only person that can read it is the recipient.
When I receive an email from somebody, I want to know that it definitely came from them.
We have SPF, DKIM and OpenPGP (all of which I use). The problem is, mail servers accept mail from domains that don't use SPF and DKIM, and more importantly, other people don't use OpenPGP.