5 ms·
The feature is meant for especially sensitive documents, you wouldn’t want it turned on for everything in the organization because it limits useful features lik
by _23sd 4y ago
The feature is meant for especially sensitive documents, you wouldn’t want it turned on for everything in the organization because it limits useful features like search and printing. More mature products like Azure Information Protection let you require encryption for certain documents based on policy, but that doesn’t seem to be part of what Google is announcing here.
- JoshTriplett 4y ago> you wouldn’t want it turned on for everything in the organization because it limits useful features like search and printing Some organizations would want to prioritize encryption over search/printing. (Also, there's no reason search and printing couldn't work with encryption.)
- prophesi 4y agoAt the very least, I can confirm that ProtonMail and Apple's Mail clients let you search through the message contents of encrypted email. I'm sure there's a performance hit, and admins wouldn't be able to search through the encrypted emails of their Workspace users, but that's a much more reasonable tradeoff.
- londons_explore 4y agoI'd be interested to know the implementation... Most search-over-encrypted-documents implementations either don't scale well (eg. require the client to do all the indexing and upload the encrypted index), or have reduced privacy (allowing the server to infer which words are in which document).
- JoshTriplett 4y ago> require the client to do all the indexing and upload the encrypted index Or just require the client to do the indexing and the searching, and not upload the index anywhere.
- prophesi 4y agoYep. Not sure how Apple/Proton implement it, but that's exactly what Tutanota does. https://tutanota.com/blog/posts/first-search-encrypted-data https://tutanota.com/blog/posts/first-search-encrypted-data
- londons_explore 4y agoAnd when you log in from a new device...? Do you now need to wait days while 1000,000 emails from the last decade are all downloaded and indexed?
- prophesi 4y agoThat's an issue with or without client-side encryption. Even with IMAP, you have to download the message before its contents can be searched. While subject/sender/recipient can be searched instantly with IMAP, regardless of encryption.
- pseudalopex 4y agoThis is a limitation of your client or server. Not IMAP.
- prophesi 4y agoNo, it's a limitation by IMAP that is rectified by the server/client.
- pseudalopex 4y agoIMAP's SEARCH TEXT command is at least 35 years old.[1] [1] https://datatracker.ietf.org/doc/html/rfc1064 https://datatracker.ietf.org/doc/html/rfc1064
- pseudalopex 4y agoMaybe if you have that many emails and 3G only and can't load a backup for some reason.
- killjoywashere 4y agoIt's more of an issue that people have to interact with vendors outside their direct ecosystem, who maintain different email systems. I can have all the PKI infrastructure I want, if my contracting officer has to coordinate payment of a $10M or $100M deliverable with a foreign company with different laws around encryption, I may have no choice but to send some things unencrypted until we can mutually agree on certain processes.