How would one go about creating a secure email architecture?
I'm thinking specifically about protecting email from routine surveillance from oppressive regimes and corporations.
I had a think about what it might look like. I envisage an email server which receives an unencrypted email, then looks up the intended recipient's GNUPG public key, and encrypts the email, before storing it on disk.
This would prevent the content of emails being stolen, or read. But the headers as well as the body of the email would need to be encrypted, which makes for problems when interoperating with standard email clients.
The only thing I can think of is something which operates in a similar way to the old Type I remailers used to, where the whole message (headers and body) were encrypted. This would mean custom clients.
Are there any existing attempts at doing something different? Any other approaches?