Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

While I agree with the sentiments, Google most likely does not delete the unencrypted mail, so even if the government hasn't stored the content of the mail they will just request copies of all your deleted mail too.

Certainly going forward it would be a good thing to do, but really (as you say) end to end encryption is required. It's a shame Hushmail was compromised [1], this is the type of thing if it was built into GMail would push encryption to the masses - I realise it's not in Google's interest or business model though.

With the smart phones being SUCH an integrated part of our lives now, this also makes it VERY difficult to keep your email with you on the go since the mailvelope plugin is only desktop based.

Shame. We have the tools, I hope we get better integration soon.

[1] http://en.wikipedia.org/wiki/Hushmail#Compromises_to_email_p...



once again on the "most likely" front, it's possible, sure, but according to their own statements, they do actually delete it when you delete it;

http://www.smartplanet.com/blog/thinking-tech/does-8220delet...

http://productforums.google.com/forum/#!topic/gmail/QZh2Ce75...

Note response; Unfortunately, once you have permanently deleted a message from Trash or Spam using "Delete forever," it cannot be recovered. Google complies with data privacy legislation. As a result, our systems are configured in a way that it is infeasible to restore user-deleted data.

Sure, they could be lying, but they could also be telling the truth, and if we assume they are then there is an advantage in keeping a fully encrypted store rather than plaintext. Google has given us no reason to believe that they are directly untrustworthy unless they are actively compelled by law to act in user hostile fashion, and they do not seem to enjoy it.

Personally I'm far more concerned about the state as a hostile entity than Google.

> With the smart phones being SUCH an integrated part of our lives now, this also makes it VERY difficult to keep your email with you on the go since the mailvelope plugin is only desktop based.

I make reference to this on the project page, there's APG which is PGP for android, makes reading / writing / signing PGP possible on mobile http://www.thialfihar.org/projects/apg/.

> Shame. We have the tools, I hope we get better integration soon.

I hope the same, I kind of see this as pushing the issue, we'll see where it goes.


Ok, let's err on the side of Google for now (although, still not sure I can fully trust them, esp with all this news).

Still, great work and thanks for the additional info. Here's to hoping one day EVERYTHING will be encrypted by default!




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: