Live data from Hacker News

Google releases stats on email encryption in transit

google.com

51–53 of 53 posts

Re: Google releases stats on email encryption in transit

#51
post #44
post #18

Earlier quoted context omitted.

That problem is quite common on the internet in general. Just think how common ftp still is! We constantly use public networks and then have to mitigate the fact that the packets are public. It would be better to treat encryption like a peering arrangement. When there is sufficient traffic between two large networks all packets should be routed via an encrypted tunnel.

While I generally agree with the concept, encryption isn't free, and will break pretty much every routing protocol used. It's easy enough to get a tunnel through transit when you control both ends, but neither the hardware nor the software that actually runs the peers supports it in any way. You'd have to set the link, then encrypt on top of that, costing a ton of cpu cycles, bandwidth overhead, and requiring somethi…

I was really thinking in terms of coporate networks, which would be considered small. It is already common on such networks to have proxies/NAT/filtering that inspect and route everything in a very resource unfrinedly way.

I would propose creating single VPN tunnel between these corporate networks that all traffic destined for the other network is routed down. Just join individual private networks with encryped tiunnels. This would be completely transparent at the client level as the data would just follow a different path. It would avoid the startup cost of SSL or the higher CPU requirements of symmetric encryption. Such a setup could be required as a contract/tendering/supplier requirement.

Really if you have two companies that are sending data that may be sensitive why would you want any of the packets to ever be sent in plan view? Client side standards will never give a complete gurantee of that. It is much more enforcable to add the security at the network level.

Re: Google releases stats on email encryption in transit

#52
post #25

Earlier quoted context omitted.

> The huge problem with email encryption right now is that you can't reasonably make it mandatory Sure you can, see pgp. Really, its nice to see they are encrypting coms between each other but I don't really see how this affects me. If I want something secure I will use pgp. Email encryption, has and, always will be a client side problem. There is nothing the middle men and women can do for you that you can reasonabl…

But Google likes to read your email so they can target ads. Even they don't want you to encrypt on the client.

Google is more than capable of delivering a user a reasonably targeted ad in gmail without reading the message body.

Re: Google releases stats on email encryption in transit

#53
post #52

Earlier quoted context omitted.

But Google likes to read your email so they can target ads. Even they don't want you to encrypt on the client.

Google is more than capable of delivering a user a reasonably targeted ad in gmail without reading the message body.

Capable but unwilling.
Post reply on HN