The de Havilland Comet, the Square Windows Near Elba, and the Water Tank Investigation That Changed Every Airliner Built After It

On January 10, 1954, BOAC Flight 781 disappeared from radar north of the island of Elba carrying 35 passengers and six crew - no distress call, no warning, just silence where the radar return had been. The investigation that followed revealed that metal fatigue at the corners of the Comet’s near-square passenger windows had torn the aircraft apart at altitude. Its findings permanently changed aircraft design: every commercial jet window built since is oval, and fatigue testing became a mandatory element of airworthiness certification worldwide.

What Made the de Havilland Comet Revolutionary

On May 2, 1952, BOAC operated the world’s first jet airliner revenue service: London to Johannesburg, aboard the de Havilland Comet 1. The aircraft was designed by Ronald Bishop, chief designer at de Havilland - a company Geoffrey de Havilland had founded in 1920, the same company that had built the Mosquito from wood and epoxy during the Second World War.

The Comet cruised at altitudes propeller-driven aircraft couldn’t reach and flew nearly twice as fast as a Lockheed Constellation. Four de Havilland Ghost turbojets sat buried in the wing roots. The pressurized cabin delivered a smoothness and quiet that passengers in 1952 had never experienced at altitude. Large, near-square windows gave panoramic views of the terrain below.

Neither the United States nor the Soviet Union had anything in commercial service to match it. Britain had genuinely, unambiguously, won the jet age.

The Accidents That Grounded the Fleet

May 2, 1953 - exactly one year after the inaugural service - a Comet crashed near Calcutta’s Dum Dum Airport during a severe tropical thunderstorm shortly after takeoff. 43 people died. Investigators attributed the accident to weather-induced structural overload, possibly compounded by pilot control inputs in turbulence. The fleet kept flying.

Then came Flight 781. The British government grounded the Comet fleet. De Havilland and BOAC conducted a systematic review - fuel systems, autopilot, control surface flutter, escape hatches, pressurization systems. After more than 50 modifications, the British Air Registration Board agreed to restore the Comet’s Certificate of Airworthiness.

On March 23, 1954, BOAC resumed service.

Two weeks later, on April 8, South African Airways Flight 201 departed Rome with 21 people aboard. It vanished over the Tyrrhenian Sea at the same altitude range, in clear afternoon weather, leaving debris scattered across the water.

Prime Minister Winston Churchill personally ordered the most thorough aviation investigation in British history. The Comet’s Certificate of Airworthiness was permanently withdrawn, and the investigation was handed to Sir Arnold Hall, Director of the Royal Aircraft Establishment at Farnborough.

Recovering Evidence from the Seafloor

Both aircraft had gone into deep water. Without wreckage, accident investigators cannot determine failure sequence - and sequence is everything. Fracture signatures on metal tell the story of what broke before what else broke, but only if the metal can be recovered.

The Royal Navy launched a salvage operation using early underwater television cameras and specialized grab equipment, systematically sweeping the seafloor in a grid pattern. They eventually recovered approximately 70 percent of BOAC Flight 781 from depths up to 500 feet.

Hall’s team laid out the recovered pieces in a hangar against a structural frame, reconstructing the aircraft fragment by fragment. The scatter pattern and trajectory analysis from witness accounts indicated the aircraft had broken apart at altitude, before water impact. The fracture signatures confirmed in-flight structural failure - not damage from hitting the water.

Why Hall Built a Water Tank

Every Comet flight subjected the fuselage to a complete pressurization cycle. On the ground, the cabin held roughly sea-level pressure. In cruise, it was pressurized to an 8,000-foot equivalent while outside pressure at altitude was near zero. That differential acted on every square inch of fuselage skin, every flight, and then reversed with every landing.

Hall needed to cycle a complete Comet airframe through thousands of pressurization cycles until it failed. The problem: pressurizing a large fuselage with compressed air to the point of rupture creates an explosion. Compressed air stored in an aluminum structure and suddenly released is, functionally, a very large bomb.

The solution was water. Hall’s team submerged an entire Comet airframe - wings and fuselage together - in a large concrete tank and used hydraulic systems to repeatedly pressurize the interior with water. Water is essentially incompressible. If the structure fails, there is no stored energy to release catastrophically. The crack forms, pressure drops immediately, and the failure can be examined without risk to anyone in the room.

Simultaneously, the team towed a recovered Comet fuselage through a long water trough to study the hydrodynamic forces it had experienced during salvage - ensuring that damage caused by underwater recovery could be clearly separated from damage that had occurred in flight. The two had to be distinguished before any fracture evidence meant anything.

What Caused the Comet to Break Apart at Altitude

At approximately 3,057 simulated pressurization cycles, the test airframe failed. A crack propagated from the corner of the automatic direction finder window cutout on top of the fuselage.

When Hall’s team returned to the recovered wreckage from Flight 781, they found the fracture origin: the corner of a passenger window cutout. The aluminum skin had fatigued to failure starting at the sharpest point in the geometry.

The Comet’s windows were large and near-square. When a pressurized fuselage flexes in flight - as all fuselages do, subtly and constantly - stress concentrates at the corners of any cutout in the skin. The more square the corner, the more severe the concentration. At a square or near-square cutout, stress at the corner can reach three times the average stress in the surrounding panel.

The engineering mathematics describing this had been understood since the 1930s. But they had never been applied to an airframe accumulating this many pressurization cycles at these altitudes. By the time of Flight 781, the Comet had logged approximately 900 operational flights - well within what anyone in 1954 would have considered a safe service life, but beyond any empirical data that existed for jet-transport pressurization fatigue. The aircraft was operating in engineering territory where the maps were blank.

Fatigue damage of this kind was undetectable by the visual inspection methods available in 1954. Each pressurization cycle added a small, invisible increment of damage at the window corner. Once a fatigue crack initiates in a pressurized structure, it does not negotiate.

How the Comet Changed Every Airliner Built After It

The Court of Inquiry issued its findings in November 1954, naming fatigue cracking at window corner stress concentrations as the primary cause of both accidents. It also documented Hall’s methodology in full - the water tank, the wreckage reconstruction, the fracture analysis procedures, the separation of impact damage from flight damage.

That methodology became the template. British and American aviation authorities both issued new requirements for pressurized aircraft design and testing. Fatigue analysis became mandatory for airworthiness certification. Proof pressure testing and extended fatigue cycling runs were required before any new pressurized airliner could carry passengers.

Designers everywhere opened their drawing boards and looked carefully at their window cutouts. The result is visible on every commercial jet flying today: oval or nearly circular windows, on every airline, in every country. Curved geometry ensures stress flows smoothly around the cutout without concentrating at any point. There are no corners. There is no stress multiplication.

Fail-safe structural design also entered the engineering vocabulary during this period. The principle: a structure should be designed so that a crack, if it forms, will not propagate catastrophically before it can be detected. Multiple load paths, crack-stopping features built into skin panels, and inspection intervals derived from fatigue analysis rather than simple time in service - these concepts are built into every airframe flying today.

De Havilland’s Legacy

The Comet 4 entered commercial service with BOAC on October 4, 1958 - four years after the accidents, following a complete redesign that included oval windows, a strengthened fuselage, and fatigue testing to standards unimaginable six years earlier. It was a genuinely fine aircraft. It flew the Atlantic.

But the lead was gone. The Boeing 707 was entering service. The Douglas DC-8 was months away. The Americans had watched, absorbed the lessons the Comet’s accidents produced, and built accordingly. Britain’s moment at the front of commercial aviation did not return.

De Havilland could not have known what they didn’t know. No aircraft had ever accumulated enough high-altitude pressurization cycles to produce this failure mode before the Comet. The engineers who designed those windows were working at the absolute edge of what their profession understood. That edge moved because of their work - at terrible cost - and because it moved, everyone who followed knew where it was.

Key Takeaways

BOAC Flight 781 (January 10, 1954) and South African Airways Flight 201 (April 8, 1954) both broke apart at altitude due to fatigue cracking originating at the corners of the Comet’s near-square passenger windows
Sir Arnold Hall’s water tank test at Farnborough - repeatedly pressurizing a submerged airframe with water rather than air - allowed engineers to cycle a fuselage safely to failure and identify the exact fracture origin at approximately 3,057 cycles
Stress concentration at square window corners can reach three times the surrounding panel stress, creating an invisible fatigue failure point that accumulates damage with every pressurization cycle
The Court of Inquiry findings of November 1954 made fatigue analysis and pressurization cycling tests mandatory for airworthiness certification, fundamentally reshaping how all pressurized aircraft are designed and tested
Every commercial aircraft window built since is oval or curved - a direct structural consequence of the fracture evidence recovered from the seafloor off Elba