The de Havilland Comet, the Square Windows That Grounded the World's First Jet Airliner, and the Metal Fatigue Discovery That Changed Every Pressurized Aircraft That Came After

The de Havilland Comet was the world’s first jet airliner, and it was genuinely brilliant - until two aircraft disintegrated over the Mediterranean in 1954 and killed 56 people in four months. The investigation that followed didn’t just explain those accidents. It created the engineering framework that keeps pressurized aircraft safe today.

Britain’s Head Start on the Jet Age

By the late 1940s, de Havilland’s chief designer Ronald Bishop was working on something that would make every propeller airliner on earth look obsolete. While Douglas DC-6s and Lockheed Constellations were grinding through the sky on radial engines, the Comet was being designed around four de Havilland Ghost turbojet engines buried clean into the wing roots - no underwing nacelles, no visual clutter. The silhouette was unlike anything passengers had ever boarded.

The aircraft flew for the first time in July 1949, and the performance numbers matched the aesthetics. It cruised at close to 490 mph at altitudes around 40,000 feet - well above the weather and well above the propeller aircraft that topped out around 20,000 feet. Passengers reported hearing conversations from across the cabin. After years of vibration, engine noise, and the smell of hot oil, commercial flying had become something different.

British Overseas Airways Corporation (BOAC) took delivery in early 1952. On May 2, 1952, the first scheduled jet passenger service in history departed London Heathrow for Johannesburg, South Africa, with stops in Rome, Beirut, Khartoum, Entebbe, and Livingstone. The trip that had taken days by propeller aircraft now took a fraction of the time. Orders came in. The world was watching Britain lead.

Three Accidents, One Grounded Fleet

May 2, 1953 - exactly one year after that inaugural service - a BOAC Comet departed Calcutta in deteriorating weather bound for Delhi. The aircraft climbed into a severe thunderstorm and broke up. 43 people were killed. Investigators attributed the accident primarily to turbulence. The fleet kept flying.

January 10, 1954: Comet registration G-ALYP - called Yoke Peter by BOAC crews - departed Rome’s Ciampino Airport. The aircraft climbed out over the Tyrrhenian Sea toward the island of Elba on a clear day. At approximately 27,000 feet, Yoke Peter sent a routine radio transmission to another BOAC aircraft below. Mid-sentence, the transmission cut off. Fishing boats near Elba began pulling debris from the water.

All 35 people aboard were dead. They died so quickly they almost certainly never knew anything was wrong.

BOAC grounded the Comet fleet. Modifications were made. The fleet returned to service in mid-March 1954.

On April 8, 1954, another Comet disintegrated - this one near Naples. 21 more people were gone. The fleet was grounded permanently, and one of the most consequential aviation investigations in history began.

The Farnborough Investigation

The Royal Aircraft Establishment at Farnborough was tasked with finding out what was destroying these aircraft. The man who led the technical investigation, Sir Arnold Hall, faced a nearly impossible problem: he had almost no wreckage. The aircraft had broken apart at altitude and scattered across miles of open water.

The Royal Navy organized one of the largest peacetime underwater salvage operations ever conducted. Divers and survey vessels worked for months, ultimately recovering approximately 70 percent of Yoke Peter’s fuselage from the sea floor. Each recovered piece was tagged with the grid coordinate where it was found, then painstakingly reassembled on a wooden frame at Farnborough like an aviation jigsaw puzzle. What they read from that wreckage told them the direction of the structural failure - but not its cause.

Arnold Hall made a decision that would prove to be one of the most important engineering calls of the twentieth century. He would test a Comet fuselage to destruction - not in flight, but in water.

The Water Tank Test

Engineers built a tank large enough to hold an entire Comet fuselage. They filled it with water, then pressurized the cabin and cycled the pressure repeatedly - up and down, up and down - simulating the pressurization of every takeoff and the depressurization of every landing.

The logic for using water rather than air is elegant. Compressed air stores energy. When a pressurized vessel fails in an air test, the result is an explosion that destroys the very evidence you need. Water is incompressible. When the test article fails in a water tank, the fuselage simply splits. Engineers can walk up and examine exactly where the crack started and exactly how it propagated, with no secondary blast to obscure the story the metal is telling.

The test fuselage ran through 3,060 pressure cycles - the equivalent of approximately 9,000 flight hours of service. Then it failed.

The crack had started at the corner of a window.

The Square Window Problem

The Comet’s windows were not perfectly round. They were roughly rectangular with rounded corners - and those corners were the problem.

When a pressurized fuselage expands under internal pressure, the skin distributes that load across its structure. But at any opening in the skin, the load has to redirect around the hole’s edges. At a corner, it concentrates. Engineers calculated that the stress at the corners of the Comet’s windows was approximately three times higher than the stress in the surrounding skin.

On every single flight, every single pressurization cycle, those corners were being flexed at three times the load of the surrounding material.

Aluminum can handle that - at first. But aluminum is not immune to fatigue. Microscopic cracks form. They grow, slowly and invisibly, one flight at a time. The metal looks fine. It feels fine. There is nothing visible at the surface to indicate what is happening at the grain level. And then, one morning at 27,000 feet, the crack reaches the length where the skin gives way, and the pressure differential does the rest - in a fraction of a second.

The investigation also found a secondary contributing factor. Punch-riveting, used in some critical areas near window edges during manufacturing, can leave microscopic damage in the material around the rivet hole - additional initiation points for fatigue cracks to start. Drill-riveting does not carry the same risk.

Two compounding problems. One aircraft. 35 people dead on a Tuesday morning in January over the island of Elba.

The Redesigned Comet 4 - and the Boeing 707

De Havilland rebuilt the Comet from its lessons. Fully oval windows, rounded completely with no corners. Thicker fuselage skin. Drill-riveting replacing punch-riveting in fatigue-critical areas. A redesigned pressurization system.

The Comet 4 entered service in October 1958. BOAC operated the first transatlantic jet passenger service - London to New York - on October 4, 1958. By every technical measure, it was a triumph.

It was also four years too late.

Two weeks after BOAC’s transatlantic inaugural, Pan American World Airways launched its own transatlantic jet service - with the Boeing 707.

Boeing had watched the Comet’s development closely and read the publicly released Farnborough investigation findings. The Farnborough team had done something unusual: they published what they found. They shared the data with the industry. The investigation was transparent rather than buried. The 707 entered service with oval windows, thicker skin, and careful attention to fatigue in its critical structure. Within a few years it had won the transatlantic market decisively.

Britain had invented the jet age, paid for its deepest secrets in lives, and then watched an American manufacturer take those lessons and build the aircraft that defined the era.

What the Comet Investigation Actually Changed

Before 1954, pressurized aircraft were not typically tested for fatigue to the degree the Comet investigation demanded. Engineers calculated stress margins and designed in safety factors, but did not necessarily cycle aircraft structures through simulated lifetimes of pressurization before certification.

The concept of damage tolerance - the idea that a structure will develop cracks, that cracks will grow, and that a design must accommodate that reality by detecting it and allowing it to be corrected before it becomes fatal - was not yet standard doctrine.

After the Comet, it was.

The water tank method pioneered at Farnborough became a fundamental requirement of aircraft certification. Before any new pressurized airliner enters service today, it goes through exactly this kind of testing: thousands of pressurization cycles in a controlled program, documenting where fatigue initiates and how fast it grows, before a single paying passenger walks up the stairs. Every Boeing, every Airbus, every Embraer, every pressurized business aircraft flying today carries, in its oval windows and fatigue-tested structure, the direct legacy of what happened near Elba in January 1954.

Nevil Shute Saw It Coming

The British writer Nevil Shute - himself a trained aeronautical engineer who co-founded Airspeed Limited and worked on the R100 airship program - published a novel called No Highway in 1948. The central plot involves a quiet engineer who calculates that a new aircraft’s tailfin will fail from metal fatigue after a specific number of flight hours. Nobody believes him. The aircraft looks and feels perfect. But the engineer knows what the metal is doing at the microscopic level.

Shute wrote that novel while the Comet was being designed, while Britain was preparing to announce to the world that it had beaten everyone into the jet age. He had grasped the concept years before the accidents proved it: a structure that looks and feels solid can be, at the level you cannot see, already failing.

A fragment of Yoke Peter sits today in the Science Museum in London - wrinkled aluminum, water-stained and scarred. Out of that wreckage came the certification framework that protects hundreds of millions of passengers every year.

Key Takeaways

The de Havilland Comet, which entered scheduled service on May 2, 1952, was the world’s first jet airliner - faster, quieter, and higher-flying than anything before it.
Two structural failures over the Mediterranean in 1954 - killing 35 people near Elba in January and 21 more near Naples in April - grounded the fleet permanently and triggered a landmark investigation.
The Farnborough water tank test revealed that stress concentrations at the corners of the Comet’s rectangular windows were approximately three times higher than in surrounding skin, creating invisible fatigue cracks that grew over hundreds of flights until catastrophic failure.
The investigation’s findings were published openly, and Boeing incorporated the lessons into the 707 - which then dominated the transatlantic market the Comet had pioneered.
Damage tolerance testing - cycling aircraft fuselages through thousands of simulated pressurization cycles before certification - became standard industry practice as a direct result of the Comet disasters, and remains so for every pressurized aircraft certified today.