4 ms·

From my perspective, what I miss with decryption only in the client (where the mail database is stored encrypted) is search. That's also the primary value of Go

From my perspective, what I miss with decryption only in the client (where the mail database is stored encrypted) is search. That's also the primary value of Google Apps for me. Easy encryption across the Internet would be more valuable to me than encrypted storage, but the option to have encrypted storage for things that are really private would make sense. I tend to opt for alternate channels with no storage in those cases though.

pdkl95 11y ago
> what I miss with decryption only in the client ... is search Yet another casualty of "software as a service". There could be better search tools on the client, but the fad for the last decade has been to push vendor lock-in and data mining instead of installable client apps. So now the full consequences of those choices are starting to be recognized.
- JupiterMoon 11y ago
  I dunno. Thunderbird has pretty decent global search now.
- mattmcknight 11y ago
  Installable client apps just don't work from me. I need to access the same email database from 4 different devices, including some I don't own and don't want the data on.
  - pdkl95 11y ago
    Then your requirements are in conflict with security. You cannot trust the network to do your encryption for you, and you can't trust a a computer you don't own to handle your private key. You may want to reconsider either dedicating some sort of portable device to be your email that you carry with you, a multi-account system the separates private email from the the email you can access remotely, or resigning yourself and those communicate with to sending using only postcards (non-end-to-end-encrypted email).
realusername 11y ago
Nothing is technically preventing the client to retrieve indexes built client-side beforehand when reading the email. The main problem is everything is currently made to make the client dumb and the server the ultimate source of truth.

pdkl95 11y ago

> what I miss with decryption only in the client ... is search Yet another casualty of "software as a service". There could be better search tools on the client, but the fad for the last decade has been to push vendor lock-in and data mining instead of installable client apps. So now the full consequences of those choices are starting to be recognized.

JupiterMoon 11y ago
I dunno. Thunderbird has pretty decent global search now.
mattmcknight 11y ago
Installable client apps just don't work from me. I need to access the same email database from 4 different devices, including some I don't own and don't want the data on.
- pdkl95 11y ago
  Then your requirements are in conflict with security. You cannot trust the network to do your encryption for you, and you can't trust a a computer you don't own to handle your private key. You may want to reconsider either dedicating some sort of portable device to be your email that you carry with you, a multi-account system the separates private email from the the email you can access remotely, or resigning yourself and those communicate with to sending using only postcards (non-end-to-end-encrypted email).

realusername 11y ago

Nothing is technically preventing the client to retrieve indexes built client-side beforehand when reading the email. The main problem is everything is currently made to make the client dumb and the server the ultimate source of truth.