Live data from Hacker News

Gmail Will Warn If Message Is Not Authenticated/Encrypted

gmailblog.blogspot.com

1–10 of 216 posts

Re: Gmail Will Warn If Message Is Not Authenticated/Encrypted

#2
I have mixed feelings about this.

> Not all affected email will necessarily be dangerous.

To me, it sounds like they're saying that most of the "affected email" WILL be dangerous -- just not ALL of it -- and that's highly misleading, of course.

Overall, though, I think this will be a good thing if it pushes more organizations ("mail senders") to implement opportunistic encryption for incoming mail and SPF/DKIM signing for outgoing mail.

That seems to be what they're referring to; that is, sending to an MX host that doesn't support opportunistic encryption) and/or receiving mail that doesn't have a valid DKIM signature. Did anyone else understand this differently?

Re: Gmail Will Warn If Message Is Not Authenticated/Encrypted

#4

meh. This doesn't seem very interesting. What would be really interesting is gmail support for public key encryption. They're perfectly positioned to roll out a user-friendly key management system.

Yep surprised they haven't rolled one out yet. Ideally placed.

Re: Gmail Will Warn If Message Is Not Authenticated/Encrypted

#7

meh. This doesn't seem very interesting. What would be really interesting is gmail support for public key encryption. They're perfectly positioned to roll out a user-friendly key management system.

Yep surprised they haven't rolled one out yet. Ideally placed.

And by ideally placed, you mean for the NSA, right?

I'd never put any GPG keys of mine in an American cloud provider. That sort of voids the entire point of it.

Re: Gmail Will Warn If Message Is Not Authenticated/Encrypted

#9
>If you receive a message that can’t be authenticated, you’ll see a question mark in place of the sender’s profile photo, corporate logo, or avatar.

This makes it sound like I (the sender) can set the image displayed if I am using DKIM. Is that the case? Or is it only if I have DKIM and have a Google account with that email?

Re: Gmail Will Warn If Message Is Not Authenticated/Encrypted

#10
post #7

Earlier quoted context omitted.

Yep surprised they haven't rolled one out yet. Ideally placed.

And by ideally placed, you mean for the NSA, right? I'd never put any GPG keys of mine in an American cloud provider. That sort of voids the entire point of it.

It is actually easier for the NSA if you host in Europe, but that is not really the point is it? Take America down a notch is the real goal.
Post reply on HN