Live data from Hacker News

Re:publica 15: Google Promotes Privacy, But Not Too Much

tutanota.de

11–20 of 79 posts

Re: Re:publica 15: Google Promotes Privacy, But Not Too Much

#11
"Because translation."

If they really said that, that's amazingly weak and clumsy.

I would have been impressed if they had openly said it's because they can't analyze your email for ads and targeting.

In fact I'd be very impressed if they said up front, briefly and not implied in a ToS book, that the reason you get free email is so they can read your email.

Re: Re:publica 15: Google Promotes Privacy, But Not Too Much

#12
From my perspective, what I miss with decryption only in the client (where the mail database is stored encrypted) is search. That's also the primary value of Google Apps for me. Easy encryption across the Internet would be more valuable to me than encrypted storage, but the option to have encrypted storage for things that are really private would make sense. I tend to opt for alternate channels with no storage in those cases though.

Re: Re:publica 15: Google Promotes Privacy, But Not Too Much

#13
post #11

"Because translation." If they really said that, that's amazingly weak and clumsy. I would have been impressed if they had openly said it's because they can't analyze your email for ads and targeting. In fact I'd be very impressed if they said up front, briefly and not implied in a ToS book, that the reason you get free email is so they can read your email.

If they really believe in their business plan, they should admit their real motives; dissembling with such a weak excuse just gives Google that "shady used car salesman" look.

The fact that they went with a dodge suggests they know that they risk a lot of blowback if people started to learn about their actual business plan.

Re: Re:publica 15: Google Promotes Privacy, But Not Too Much

#15
I don't need the extra security provided by end-to-end encryption for the vast majority of emails I receive and send. I value that ability to search/filter these emails far more than I value the security.

For the few emails I send where the value of the security provided exceeds the lost value due to being unable to search I can, using their extension, enable end-to-end encryption.

This system suits my needs perfectly, I appreciate that others may want all the emails they send to be encrypted but why should Google cater to this - they cannot make any money from encrypted emails.

Re: Re:publica 15: Google Promotes Privacy, But Not Too Much

#16
Anyone who says that PGP is not meant for common use has 20+ years of history clearly proving them right. Moxie doesn't believe it in[1], even PGP's own creator doesn't use it any more[2]. OP is trying to make news out of nothing.

[1] http://www.thoughtcrime.org/blog/gpg-and-me/

[2] http://www.forbes.com/sites/parmyolson/2013/08/09/e-mails-bi...

Re: Re:publica 15: Google Promotes Privacy, But Not Too Much

#17

From my perspective, what I miss with decryption only in the client (where the mail database is stored encrypted) is search. That's also the primary value of Google Apps for me. Easy encryption across the Internet would be more valuable to me than encrypted storage, but the option to have encrypted storage for things that are really private would make sense. I tend to opt for alternate channels with no storage in tho…

> what I miss with decryption only in the client ... is search

Yet another casualty of "software as a service". There could be better search tools on the client, but the fad for the last decade has been to push vendor lock-in and data mining instead of installable client apps. So now the full consequences of those choices are starting to be recognized.

Re: Re:publica 15: Google Promotes Privacy, But Not Too Much

#18
post #8

I remember end-to-end vs. point-to-point from my crypto class back in the Pleistocene, so I thought I'd share the analogy my professor used just because I loved it: In WW2, the Allied Navies faced two main naval code strategies: Germany's and Japan's. Roughly, the Japanese Navy sent their routing information in plaintext, while the Kriegsmarin sent it in ciphertext. Because the German routing instructions were encryp…

Why not encrypt the routing separately?

Re: Re:publica 15: Google Promotes Privacy, But Not Too Much

#19
post #14

More convincing than translation would be spam filtering. I think end-to-end encryption would make spam filtering a lot more difficult.

Signed messages give you a much easier way to weed out "unknown" sender accounts (=keys). Encryption with signing makes it easier to recognize legit email. You need to go back to decentralized filtering though. Or maybe publicly verifiable signatures (=no sender anonymity) on encrypted content would be an option.

Re: Re:publica 15: Google Promotes Privacy, But Not Too Much

#20
post #16

Anyone who says that PGP is not meant for common use has 20+ years of history clearly proving them right. Moxie doesn't believe it in[1], even PGP's own creator doesn't use it any more[2]. OP is trying to make news out of nothing. [1] http://www.thoughtcrime.org/blog/gpg-and-me/ [2] http://www.forbes.com/sites/parmyolson/2013/08/09/e-mails-bi...

Intended for common use vs. effective in that role are not the same thing.
Post reply on HN