topic Re: Confidential Mode in Industry News

Confidential Mode

denbesten — Tue, 21 Aug 2018 03:53:50 GMT

Gmail now has a new feature, "Confidential Mode". The Electronic Frontier Foundation is (rightly) skeptical of how "Confidential" it is. Gmail seems more interested in limiting the actions the intended recipient can take than in ensuring that it is in fact received by the intended recipient.

Re: Confidential Mode

Shannon — Tue, 21 Aug 2018 10:28:50 GMT

Yes, the name is really misleading! There's no guarantee of confidentiality here, unless your emails can only be accessed on a completely secured system.

The idea of having google send pass-codes via SMS is also weird, since you may not always have access to a mobile number of the party you're emailing, and even if you do, they may not want their privacy violated.

It would make more sense to email info in an encrypted format & then convey the pass-code to the recipient via a separate channel --- without Google involved in the latter.

Re: Confidential Mode

CraginS — Tue, 21 Aug 2018 22:13:30 GMT

Google made a fundamental error by assuming everyone follows the rules, uses only the standard tools and software. For a story of precisely the same bad assumption in software security design three decades ago see the blog post, Old Mistake in Security Design is New Again: GMAIL Confidential Mode.