4 ms·

The case against Google is "whatever we can throw together to pressure them to stop pushing end-to-end encryption we can't break". Google is by far the biggest

The case against Google is "whatever we can throw together to pressure them to stop pushing end-to-end encryption we can't break". Google is by far the biggest proponent of this, and they have both the most popular browser and some of the most popular sites on the Internet, so they can very easily do so. Whether you think Google is a monopoly or not, and whether you think they've done harm with that monopoly or not, I think this case is going to do net harm to Internet security.

aspenmayer 7y ago
What are you referring to when you say: ‘Google is by far the biggest proponent of this [end-to-end encryption]’? In what way do you mean?
- JoshTriplett 7y ago
  Google has done a great deal of work to push and early-adopt new web security standards, including QUIC (which inspired HTTP/2 and became HTTP/3), by changing the Chrome browser, Android, Google services, etc. They've also heavily pushed Certificate Transparency. And they've pushed for device encryption, as well, on both Android and Chrome OS. Those and many others are technologies that better support a web without backdoors and devices without backdoors. I'm not necessarily suggesting that they've done the most work in all those areas, and many others are doing critical work, some of which should get a lot more attention than it does. But Google is literally the biggest proponent, insofar as they can push it the most quickly because they control the most endpoints.
thekyle 7y ago
I don't see how you can consider Google to be "by far the biggest proponent" of end-to-end encryption. What Google products even use end-to-end encryption? Duo and Chrome sync are all I can think of. Even Facebook has end-to-end encryption in WhatsApp and says it's coming to their other messaging products which is far more than Google does.
kortilla 7y ago
Google doesn’t even use end-to-end encryption for its consumer facing stuff. It’s against their whole model of scanning content for keywords to eliminate spam, improve advertising, etc.

aspenmayer 7y ago

What are you referring to when you say: ‘Google is by far the biggest proponent of this [end-to-end encryption]’? In what way do you mean?

JoshTriplett 7y ago
Google has done a great deal of work to push and early-adopt new web security standards, including QUIC (which inspired HTTP/2 and became HTTP/3), by changing the Chrome browser, Android, Google services, etc. They've also heavily pushed Certificate Transparency. And they've pushed for device encryption, as well, on both Android and Chrome OS. Those and many others are technologies that better support a web without backdoors and devices without backdoors. I'm not necessarily suggesting that they've done the most work in all those areas, and many others are doing critical work, some of which should get a lot more attention than it does. But Google is literally the biggest proponent, insofar as they can push it the most quickly because they control the most endpoints.

thekyle 7y ago

I don't see how you can consider Google to be "by far the biggest proponent" of end-to-end encryption. What Google products even use end-to-end encryption? Duo and Chrome sync are all I can think of. Even Facebook has end-to-end encryption in WhatsApp and says it's coming to their other messaging products which is far more than Google does.

kortilla 7y ago

Google doesn’t even use end-to-end encryption for its consumer facing stuff. It’s against their whole model of scanning content for keywords to eliminate spam, improve advertising, etc.