SMTP is root of the problem. It needs to be replaced with something secure, or we need to bolt-on something better.

RFC 4406 talks about trying a bolt on process for making sure the sender is the...