> To have secure email I think html /css should be dropped from email support

I don’t think that helps at all. We already know how to consume that securely, we do it billions of times a day in web browsers.

> the inbox should work on an invite only basis. Basically you should pre-authorize the senders just like you add someone as friend on a social network.

Yes. A fundamental problem with email is that the only thing required to send email to somebody is knowledge of their email address, which as a recipient you cannot control. This is what enables spam and phishing. This needs to be changed so that in order to send email to somebody, you also need their consent. A “friend request” mechanism is one way of achieving this.

I think this is a problem that can be feasibly solved in a fairly reasonable way, and I sketched out a protocol for doing so a while back, which I described in more detail in this comment:

https://news.ycombinator.com/item?id=44969726

▲

jader201 4 hours ago | parent [-]

> A “friend request” mechanism is one way of achieving this.

But then you’re left dealing with spam “friend requests”, which is still something I have to take action on, filter out, or ignore — same as spam email.

▲

JimDabell 3 hours ago | parent [-]

Having a trustworthy inbox that contains only legitimate email and a separate friend request queue where you can decide “do I know this person / organisation?” is far better than having a single inbox that’s a vast ocean of emails of unknown provenance you have to make a trust decision for for every single email.

	▲	inigyou 2 hours ago \| parent [-]
		You can do this with email today. Heck, you could do it in 2001, I remember. Hotmail's "exclusive" spam filter policy where anything not from your contacts goes to spam, where you can decide if you want to add them as a contact or not.