4 ms·

But now that gmail has ssl access, this is no longer true, right?

rayiner 14y ago
Gmail has SSL to Google's e-mail server. If you e.g. send a mail to someone using Outlook, it's sent in clear text. And at both ends it's scanned to deliver everyone involved targeted advertising. "Reasonable expectation of privacy" doesn't have an implicit "only as against the government." If you're knowingly exposing the contents to Google and Microsoft to scan, you can't claim to have a "reasonable expectation of privacy" in the contents.
- alexanderh 14y ago
  And this is why you always use something along the lines of PGP end to end.
  - mimiflynn 14y ago
    PGP needs to be more easily accessed by non-tech folk.
    - eksith 14y ago
      Absolutely. Some of the biggest failures in security is lack of ease of use by and large, in addition to ignorance. I think most people are willing to do the proper thing, but they'll actually do it only if it's easy.
  - palebluedot 14y ago
    The problem is this works only with 2 parties that have already agreed to, and are willing to use, encryption. How many websites, services, and other sources of email have an option to encrypt your email to you with your public key? Not many at all. I've stopped putting my public key on emails I send, because almost no one ever encrypted email to me, unless they were specifically sending something perceived to be sensitive.
    - kyrias 14y ago
      Give me your key and I'll send you one ;)
- maxerickson 14y ago
  Is it reasonable to have different feelings about an automated system than some random person? The ad-bots at Google aren't known to be very gossipy. (I don't mean this to be snide. I think this is an instance of a very interesting phenomenon, where we reason about our society as if it were a village.)
  - rayiner 14y ago
    The law avoids anthropomorphizing computers. So the "person" here is Google, not the ad-bots. The ad-bots are just tools used by the person who has access to your e-mail.

Gmail has SSL to Google's e-mail server. If you e.g. send a mail to someone using Outlook, it's sent in clear text. And at both ends it's scanned to deliver everyone involved targeted advertising. "Reasonable expectation of privacy" doesn't have an implicit "only as against the government." If you're knowingly exposing the contents to Google and Microsoft to scan, you can't claim to have a "reasonable expectation of privacy" in the contents.

alexanderh 14y ago
And this is why you always use something along the lines of PGP end to end.
- mimiflynn 14y ago
  PGP needs to be more easily accessed by non-tech folk.
  - eksith 14y ago
    Absolutely. Some of the biggest failures in security is lack of ease of use by and large, in addition to ignorance. I think most people are willing to do the proper thing, but they'll actually do it only if it's easy.
- palebluedot 14y ago
  The problem is this works only with 2 parties that have already agreed to, and are willing to use, encryption. How many websites, services, and other sources of email have an option to encrypt your email to you with your public key? Not many at all. I've stopped putting my public key on emails I send, because almost no one ever encrypted email to me, unless they were specifically sending something perceived to be sensitive.
  - kyrias 14y ago
    Give me your key and I'll send you one ;)
maxerickson 14y ago
Is it reasonable to have different feelings about an automated system than some random person? The ad-bots at Google aren't known to be very gossipy. (I don't mean this to be snide. I think this is an instance of a very interesting phenomenon, where we reason about our society as if it were a village.)
- rayiner 14y ago
  The law avoids anthropomorphizing computers. So the "person" here is Google, not the ad-bots. The ad-bots are just tools used by the person who has access to your e-mail.