Why can't email be secure?
Coming on the heels of our announcement that we had shut down our Silent Mail service, we received a comment about securing email communications. “In a recent press release, your company stated it was impossible to secure email communication ‘as we know it’.
Context & Ripple Effects
Silent Mail’s shutdown follows a broader privacy critique: Silent Circle’s account of email’s privacy limits and reporting on webmail exposure to NSA surveillance both focused attention on the provider-controlled parts of ordinary email. Earlier coverage also showed that filtering behavior could make iCloud unreliable for Silent email, illustrating how a secure layer depends on systems outside its control.
First-order effects
- Silent Mail users lose the service as an option for protected email communications, while Silent Circle publicly draws a boundary between secure messaging and conventional email.
- The shutdown makes interoperability with standard email a product constraint rather than a feature Silent Circle can credibly promise to solve.
Second-order effects
- Webmail providers and email clients face sharper scrutiny over the server-side handling, filtering, and access paths that sit outside a sender’s control.
- Privacy-focused communication vendors have an incentive to steer users toward purpose-built channels instead of presenting ordinary email as securely fixable.
Third-order effects
- The episode points toward a split between interoperable email and systems designed around end-to-end security: compatibility with the installed email ecosystem limits the guarantees a service can make.
- If providers continue to control key parts of message delivery and storage, security competition will shift from securing email itself to replacing it for sensitive exchanges.
The trend: Private communications services are separating from legacy email when email’s shared infrastructure prevents end-to-end security guarantees.