Hacker News new | ask | show | jobs
by superuser2 3539 days ago
>to an insecure server

Email is insecure regardless of who owns the server or where it's located. The government's own position is that emails in transit are postcards, not letters, and emails at rest are abandoned property, not personal papers and effects.

On the scale of how bad this is, plain old email on a private dedicated server is a 10/10, but plain old email on an @state.gov server would have been at least a 9/10. From an "endangering national security" perspective, we should be equally angry about everyone who used the official State email server for classified information.

It's not just information disclosure. Imagine the lulz to be had from the fact that the Security of State can't distinguish between an email from the President and any idiot who knows how to forge a FROM header.

Also, that time when it turned out that the State Department let the Russians have RCE on its email server for more than a year [1].

[1] http://gizmodo.com/state-dept-just-shut-off-part-of-email-sy...

1 comments

Not sure what your argument is. Yes, all email is insecure. That's why it should have been transmitted over exactly zero email systems ever. Instead it was transmitted not only over email, but a remarkably insecure email whose existence was predicated by a desire to evade FOIA.

She's either remarkably inept, or remarkably shady (or both). I'm saying this all with the legitimate desire for her to win, and I'll be voting for her myself, but good lord at least be intellectually honest about what's happening.