To be truly secure, you need to have the incoming/outgoing servers encrypted with SSL (gmail does this), PGP support for your actual messages sent (public/private keys) and all IP and metadata hidden from source of the emails. Thus far, I personally have not found a way to combine all three. Anyone here know how to?