[jeroenhd]

The biggest issue is that the developer needs to opt in, the user can't decide "my email client should trust this certificate".