4 ms·

Without government resources, it's hard to imagine this server could be secured, copying the data to two private companies creates much more exposure. The rule

Without government resources, it's hard to imagine this server could be secured, copying the data to two private companies creates much more exposure. The rule of security is to make the attack more expensive than it's worth to your adversary. How much are the U.S. Secretary of State's emails worth? Certainly they are worth billions, and I'd guess even trillions of dollars; the information could make existential differences, for example to security of entire nations. In addition, the money you could make with foreknowledge of U.S. policies, for example in oil markets, seems astronomical. I expect that foriegn intelligence services, with billions in reources and highly skilled personnel, had access to her mail. I expect some private interests also did.

imgabe 12y ago
It seems the objection to this practice is that government email is supposed to be insecure by design in that anyone should be able to access it by making a FOIA request. To me, that seems kind of silly. I can imagine there a lot of legitimate reasons the Secretary of State would not want their email to be publicly accessible.
- hackuser 12y ago
  > It seems the objection to this practice is that government email is supposed to be insecure by design in that anyone should be able to access it by making a FOIA request. To me, that seems kind of silly. I can imagine there a lot of legitimate reasons the Secretary of State would not want their email to be publicly accessible. Security doesn't mean everything is inaccessible, it means you control who, when, and where the data can be utilized. Obviously not all of the Secretary of State's email should be publicly accessible, but 1) the law as implemented by the government, and not a private individual, should control access, 2) someone needs to ensure control is maintained and prevent unauthorized access, and a private individual probably doesn't have the resources to do it.

imgabe 12y ago

It seems the objection to this practice is that government email is supposed to be insecure by design in that anyone should be able to access it by making a FOIA request. To me, that seems kind of silly. I can imagine there a lot of legitimate reasons the Secretary of State would not want their email to be publicly accessible.

hackuser 12y ago
> It seems the objection to this practice is that government email is supposed to be insecure by design in that anyone should be able to access it by making a FOIA request. To me, that seems kind of silly. I can imagine there a lot of legitimate reasons the Secretary of State would not want their email to be publicly accessible. Security doesn't mean everything is inaccessible, it means you control who, when, and where the data can be utilized. Obviously not all of the Secretary of State's email should be publicly accessible, but 1) the law as implemented by the government, and not a private individual, should control access, 2) someone needs to ensure control is maintained and prevent unauthorized access, and a private individual probably doesn't have the resources to do it.