5 ms·

(Tedious disclaimer: my opinion, not my employer's. Not representing anybody but myself. I work at Google, not on gmail.) While the main point of this article

(Tedious disclaimer: my opinion, not my employer's. Not representing anybody but myself. I work at Google, not on gmail.) While the main point of this article is about legislation that enables interception, they're using gmail as an example and there's something I'd like to point out (took a little digging to find a place where this had been said publicly): http://googleblog.blogspot.co.uk/2014/03/staying-at-forefront-of-email-security.html http://googleblog.blogspot.co.uk/2014/03/staying-at-forefron... "In addition, every single email message you send or receive—100 percent of them—is encrypted while moving internally. This ensures that your messages are safe not only when they move between you and Gmail's servers, but also as they move between Google's data centers—something we made a top priority after last summer’s revelations." The NSA can lawfully intercept all of Google's inter-datacenter traffic at the borders of the US. Good luck to them in doing anything useful with this firehose of encrypted traffic.

zz1 12y ago
Looks like you don't remember the "SSL added and removed here". Sure, Google took countermeasures, but that is legal, and it shouldn't be, that's the point.
juliob 12y ago
And you're so sure that there isn't a single NSA agent working at Google who could subvert your systems? Let's be realistic
- asuffield 12y ago
  It would be a fairly poorly designed system if any individual could subvert it without getting caught. It's not all that important who's paying them ;) I can't talk about internal systems at all, of course.
falcolas 12y ago
> The NSA can lawfully intercept all of Google's inter-datacenter traffic at the borders of the US. And likely inside the foreign DCs as well. If I recall my MySQL session last year, Google's still working in intra-machine encryption, as well as MySQL encryption (which they dubbed at the time as hard).

zz1 12y ago

Looks like you don't remember the "SSL added and removed here". Sure, Google took countermeasures, but that is legal, and it shouldn't be, that's the point.

juliob 12y ago

And you're so sure that there isn't a single NSA agent working at Google who could subvert your systems? Let's be realistic

asuffield 12y ago
It would be a fairly poorly designed system if any individual could subvert it without getting caught. It's not all that important who's paying them ;) I can't talk about internal systems at all, of course.

falcolas 12y ago

> The NSA can lawfully intercept all of Google's inter-datacenter traffic at the borders of the US. And likely inside the foreign DCs as well. If I recall my MySQL session last year, Google's still working in intra-machine encryption, as well as MySQL encryption (which they dubbed at the time as hard).