4 ms·

G Suite has implemented recently an option that lets you email sensitive content with a timer. The user receives the email and no content is in the email, inste

by rntksi 7y ago

G Suite has implemented recently an option that lets you email sensitive content with a timer. The user receives the email and no content is in the email, instead a link is shown, and the content will be deleted after some kind of triggers (e.g. after X minutes, or after having been read once) Now I would be interested in whether Google Vault retains those. Because it's a conundrum either way. If google vault does retain it, you have sensitive content that people think are private but is not. If google vault does not retain it, then accountability, auditing, liability, etc... goes out the window and google vault isn't a vault anymore. Anyone on G Suite Business can check and confirm?

plexicle 7y ago
I don't think I can see those. I know if you turn history off in Hangouts, I can't access those either. Unless something recently changed.
- Tyr42 7y ago
  Chat with history off is not recorded as far as I can see. https://support.google.com/a/answer/7664184?visit_id=637217894253118613-4171235798&rd=1 https://support.google.com/a/answer/7664184?visit_id=6372178... If history is off, messages are deleted after 24 hours. Vault can't hold, retain, or search direct messages that are sent with history turned off. Check with a Vault admin to confirm that these history settings comply with your organization's data retention obligations.
Tyr42 7y ago
https://support.google.com/vault/answer/4388708?hl=en https://support.google.com/vault/answer/4388708?hl=en March 7, 2019 If your organization enables Gmail confidential mode, Vault can hold, retain, search, and export all confidential mode messages sent by users in your organization. Confidential messages sent after November 30, 2018 are visible to Vault in the mailboxes of all internal senders and recipients. Messages are always available to Vault, even when the sender sets an expiration date or revokes recipients' access to confidential mode messages. https://support.google.com/a/answer/7684332?hl=en https://support.google.com/a/answer/7684332?hl=en Confidential mode messages and Vault Vault can hold, retain, search, and export all confidential mode messages sent by users in your domain. Vault has no visibility into the content of confidential mode messages sent to your organization from external parties. If your domain uses Vault, carefully review how Vault handles confidential mode messages To support Vault's requirement to access confidential mode messages, Gmail attaches a copy of the confidential mode content to the recipient's message. Here's what you should know about this copy: It's attached only when the message sender and recipient are in the same organization. It's only available to Vault. Senders and recipients cannot access the copy from Gmail. Third-party mail archiving tools cannot access the copy. To delete all copies of a confidential mode message, you must delete it from the sender account and all recipients' accounts.
jedberg 7y ago
An expiring email only expires for the recipient. It is still in your sent folder. So it would fall under your company’s policies for retention of sent messages.
froindt 7y ago
>G Suite has implemented recently an option that lets you email sensitive content with a timer. The user receives the email and no content is in the email, instead a link is shown, and the content will be deleted after some kind of triggers (e.g. after X minutes, or after having been read once) I knew that capability existed, and it sounds like a great avenue for phishing. People who routinely receive highly sensitive messages like that are going to be more apt to open a link than my mom, who is aware of phishing and whose spidey senses would be tingling.
- jedieaston 7y ago
  The Office 365 one (at least, for a long time) looked just about like a phishing message because it was an email from Microsoft asking you to click on a link. Especially if Outlook blocked the images (as it does by default).

by rntksi 7y ago

plexicle 7y ago

I don't think I can see those. I know if you turn history off in Hangouts, I can't access those either. Unless something recently changed.

Tyr42 7y ago
Chat with history off is not recorded as far as I can see. https://support.google.com/a/answer/7664184?visit_id=637217894253118613-4171235798&rd=1 https://support.google.com/a/answer/7664184?visit_id=6372178... If history is off, messages are deleted after 24 hours. Vault can't hold, retain, or search direct messages that are sent with history turned off. Check with a Vault admin to confirm that these history settings comply with your organization's data retention obligations.

Tyr42 7y ago

https://support.google.com/vault/answer/4388708?hl=en https://support.google.com/vault/answer/4388708?hl=en March 7, 2019 If your organization enables Gmail confidential mode, Vault can hold, retain, search, and export all confidential mode messages sent by users in your organization. Confidential messages sent after November 30, 2018 are visible to Vault in the mailboxes of all internal senders and recipients. Messages are always available to Vault, even when the sender sets an expiration date or revokes recipients' access to confidential mode messages. https://support.google.com/a/answer/7684332?hl=en https://support.google.com/a/answer/7684332?hl=en Confidential mode messages and Vault Vault can hold, retain, search, and export all confidential mode messages sent by users in your domain. Vault has no visibility into the content of confidential mode messages sent to your organization from external parties. If your domain uses Vault, carefully review how Vault handles confidential mode messages To support Vault's requirement to access confidential mode messages, Gmail attaches a copy of the confidential mode content to the recipient's message. Here's what you should know about this copy: It's attached only when the message sender and recipient are in the same organization. It's only available to Vault. Senders and recipients cannot access the copy from Gmail. Third-party mail archiving tools cannot access the copy. To delete all copies of a confidential mode message, you must delete it from the sender account and all recipients' accounts.

jedberg 7y ago

An expiring email only expires for the recipient. It is still in your sent folder. So it would fall under your company’s policies for retention of sent messages.

froindt 7y ago

>G Suite has implemented recently an option that lets you email sensitive content with a timer. The user receives the email and no content is in the email, instead a link is shown, and the content will be deleted after some kind of triggers (e.g. after X minutes, or after having been read once) I knew that capability existed, and it sounds like a great avenue for phishing. People who routinely receive highly sensitive messages like that are going to be more apt to open a link than my mom, who is aware of phishing and whose spidey senses would be tingling.

jedieaston 7y ago
The Office 365 one (at least, for a long time) looked just about like a phishing message because it was an email from Microsoft asking you to click on a link. Especially if Outlook blocked the images (as it does by default).