>All I can say is OMG yes. I've been meaning to write the exact same blog post. How is it we're at 2019 and email clients don't demand some kind of signature?

So that you have a false sense of security when the keys have been stolen from a clueless user you correspond with?