4 ms·
I think if Gmail decided to implement email signing today as a prominent feature where they show a big warning for all non-signed emails the user demand for it
by seanwilson 8y ago
I think if Gmail decided to implement email signing today as a prominent feature where they show a big warning for all non-signed emails the user demand for it would happen pretty quick e.g.
WARNING: You cannot trust this email was sent from who it
says it's from, the email have been modified in transit,
and the email may have been read by hackers in transit
Similar to how Chrome started showing non-HTTPS sites as "Not secure".
- organsnyder 8y agoThey already show this information, but it's not prominent (I had to view the sender details to see it). https://support.google.com/mail/answer/6330403 https://support.google.com/mail/answer/6330403
- mankyd 8y agoEncryption and signing are different things here. Encryption in this case means that the contents of the email are encrypted between Google's servers and the recipient's servers. i.e. preventing snooping. Signing verifies that the contents of the email itself have been authenticated by the author. I.e. prevent spoofing.
- organsnyder 8y agoTheir documentation doesn't mention signing specifically, but wouldn't S/MIME include signing?
- mankyd 8y agoSigning on behalf of the server, maybe, but gmail in no way supports/encourages having the actual author sign their messages, to my knowledge.