21–30 of 96 posts
Gave me a good laugh this morning...
Could anyone recommend a hosted email service that does not allow spying on users? Alternatively I wonder what Bruce Schneier recommends? Do you have to host your own email server?
Under U.S. laws, providers are often required to give information to the government if they have a warrant. If you want (more) security, host it yourself.
Unless you host your own email, I assume that even without this specific backdoor built in google would have little trouble getting at the email they host. This is not necessarily bothering to me, or unexpected for hosted services.
The backdoor would not be for Google, but for US intelligence.
If Google can access my data anyway(even though its a pain in the ass), they can still comply with US subpoena's. I would imagine its easier to just automate the process(with a backdoor of sorts) then have to mess around doing this all the time.
I don't see any details on the actual backdoor in the article, so I hesitate to jump to conclusions.
Could anyone recommend a hosted email service that does not allow spying on users? Alternatively I wonder what Bruce Schneier recommends? Do you have to host your own email server?
Under U.S. laws, providers are often required to give information to the government if they have a warrant. If you want (more) security, host it yourself.
Not that I think this would truly help (they probably replicate all inbound/outbound mail to some vast pool for statistical analysis), but is there an automated way to delete all mail from one's Gmail account? I use fetchmail to remove mail from my inbox and manage it on my workstation, but must periodically log on via the web interface and go to my "All Mail" folder and do a manual select and delete.
Could anyone recommend a hosted email service that does not allow spying on users? Alternatively I wonder what Bruce Schneier recommends? Do you have to host your own email server?
You could pgp encrypt anything that you really don't to be read in transit. Short of that, you might as well assume that your emails are being read and stored by third parties. Even if you personally use the most secure email server in the world, it doesn't matter because everyone that you send email to or from is likely using hosted services like gmail, verizon, hotmail, etc.
Edit: Re-reading my response... I don't mean this in a condescending way and I agree that PGP is a good way to handle email privacy. I only meant to point out that the majority of people don't use it.
Not that I think this would truly help (they probably replicate all inbound/outbound mail to some vast pool for statistical analysis), but is there an automated way to delete all mail from one's Gmail account? I use fetchmail to remove mail from my inbox and manage it on my workstation, but must periodically log on via the web interface and go to my "All Mail" folder and do a manual select and delete.
What's the point of SSL in Gmail if Google has your certs?
Earlier quoted context omitted.
You could pgp encrypt anything that you really don't to be read in transit. Short of that, you might as well assume that your emails are being read and stored by third parties. Even if you personally use the most secure email server in the world, it doesn't matter because everyone that you send email to or from is likely using hosted services like gmail, verizon, hotmail, etc.
One big point here is that PGP only works when both sender and receiver and doing it. Try sending Bank of America a PGP encrypted email about your account. See what happens. Edit: Re-reading my response... I don't mean this in a condescending way and I agree that PGP is a good way to handle email privacy. I only meant to point out that the majority of people don't use it.
https://grepular.com/Automatically_Encrypting_all_Incoming_E...
So if my mail server or any of my imap clients are compromised, my mail isn't.