4 ms·
The marketing site says there’s full text search. The paper doesn’t cover this. How is this being solved here?
by raggi 3y ago
The marketing site says there’s full text search. The paper doesn’t cover this. How is this being solved here?
- TillE 3y agoSeems trivial enough to do client-side on modern hardware, especially if you exclude attachments.
- raggi 3y agoWithout producing confirmation side channels and so on? Doesn’t seem that trivial- at least it needs more thought than assumption of simplicity
- amilich 3y agoWe do it in a fairly straightforward manner right now. Check out the blog I linked to above - generate an in-memory index, end-to-end encrypt it, and store it browser storage. It's only decrypted in memory.
- throwaway1566 3y agoTo do this you would have to download all emails on all devices all the time to index them. Kind of makes the whole point of a cloud based email moot, if everything is on my device anyway, and logging in and out resets it all - might as well use an email client app.
- amilich 3y agoDone completely client side. We actually have multiple blogs on this - https://skiff.com/blog/private-search https://skiff.com/blog/private-search
- raggi 3y agoSo if I have 15gb of email, I have to process all of that on every client bootstrap? How do you plan on scaling your service with respect to this problem? once you have a non-trivial user base with non-trivial data volumes this is likely to become a substantial problem.
- raggi 3y agoTo put this in context, the trivial example of a user with a 15gb account, say you happened to be using s3 for storage. They buy a new phone, that costs you ~$1.50 that month, or 50% of your revenue at current pricing. They buy a new iPad and a new laptop? You’re 50% in the red. Similarly you’ll have some users who are, say, content creators. They shove a 10gb video in their drive. Let’s say they have a laptop, a workstation, a phone and an iPad. Their upload is downloaded at least 3 times, costing you ~$4.50.
- mlhpdx 3y agoYeah, this is where it gets real. VC funding and unbounded potential operational costs. Ouch.
- amilich 3y agoThis isn't how it works at all? We don't pay for storage on users devices... buying the device = buying the storage. It's actually much more efficient than doing search through some massive database.
- onereplyac 3y agoDepends, on an older phone, downloading all emails just to allow for searches locally won't be very efficient. Log out also becomes a problem, if emails are stored on one device that gets stolen, adversary now has access to the local index since all the keys or on the device usually with no FDE. Meanwhile with gmail a log-out would clear all traces instantly.
- deleted 3y ago[deleted]
- pseudalopex 3y agoAll common operating systems can encrypt keys or full disks.
- amilich 3y ago