I've read chunks of the site, but I'm still not entirely clear on what advantage this scheme has over RSA encryption of standard SMTP mail (via PGP/MIME on the local machine, say).
Is the main advantage that a given identity isn't tied to a specific server here? Is that a big enough gain to justify an entirely new protocol and ecosystem of clients? I assume I'm missing some other benefits.
P2P reduces points of failure. Sure, you can encrypt email to your heart's content, but can you trust the server you dropped it with to deliver it? "Why would anyone want to prevent you emailing people?" you ask. Lots of reasons, the biggest of which seems to me to be that if you can't trust encrypted mail to arrive, perhaps you'll abandon it.
If yourserver.com is connecting to friendsserver.com on port 25... there is some metadata. I mean if three-letter-agencies are monitoring the internet they'll figure out what just happened.
Isn't that still an issue for this new protocol? My skim through the site gave me the impression that this system essentially addresses messages to a specific RSA signing identity. I can just as easily choose to do that over SMTP, right? (I'm imagining sending to an SMTP email address encoded in the public signing key.)
Is the main advantage that a given identity isn't tied to a specific server here? Is that a big enough gain to justify an entirely new protocol and ecosystem of clients? I assume I'm missing some other benefits.