3 ms·
You have access to all the code and can read it and compile it yourself, and then turn off automatic updating. And if you're not tech-savvy enough to do that,
by raldi 12y ago
You have access to all the code and can read it and compile it yourself, and then turn off automatic updating.
And if you're not tech-savvy enough to do that, you can hire someone else to.
And if even that's not enough to please you, then tell me, what could possibly satisfy you?
- simias 12y agoUse a third party tool instead of putting all your trust into a single point of failure. There are plenty to choose from. What you're proposing is pretty complex and time consuming, you can't expect the average user of this extension to do that (I know I wouldn't). Or alternatively decide that you're fine with trusting google with whatever info is in your emails because you believe they have to much to lose if they're caught eavesdropping on some random Joe like me. That's what I do. And if tomorrow I feel I have a mail sensitive enough that I don't want to risk Google or some government intercepting it I certainly won't do it from my web browser's using Google's own extension.
- raldi 12y agoHow does using a third-party tool solve anything? Its code probably won't have as many skilled eyeballs reviewing it.
- simias 12y agoMaybe, maybe not, GnuPG has been here a long time already for instance. But that's not the point anyway, the point is that Google can update your browser and the extension without you being aware of it very easily. You can turn it off of course, but who does that? Running an outdated browser is not exactly the best security measure...