Hacker News new | ask | show | jobs
by surferbayarea 3430 days ago
more like the internet will finally be fixed. There is no reason gmail cannot encrypt my email and remove pii data, except that it will eat into advertising revenues. Its easy for companies like Google to take a stand on an easy thing like the government making it a bit harder to get visas, but when it comes to saying no to government requests for your email - they happily comply.
1 comments

The number one benefit that Gmail touted when it launched was searchable email. That will break.

You're perfectly free to use E2E encryption on Gmail, and they are even trying to make it easy for you, though that project is evidently not as well staffed as the advertising org.

search-ability is not a constraint for encryption. Eq see https://people.eecs.berkeley.edu/~dawnsong/papers/se.pdf
Performant search is. Gmail wouldn't work with O(n) search times.
The inverted index could simply be built/live on client side. The cloud is then just a backup data storage. Encrypted email is downloaded, unencrypted and indexed on your laptop/phone etc.
To be clear, you're proposing that users download their entire email storage to their phones and browsers before they can search or spam filter their email? And you think that this would be a compelling product for the average email user? I'm having a hard time figuring out if you're trolling.
Isn't this how pretty much any mail client does it? Thunderbird does a decent job at spam filtering my mail. You know, I can even search folders in Outlook! Saying that scanning your 1M mails with 1kb each requires the use of a cloud service seems a bit over the top.
Sure - might not be easy for email. It does work for imessages (no server storage, typical size 1-5GB, stored + indexed on client side). So once phones start having 50GB+ storage(wait my iphone already does :p), its not so far fetched to think of having a 20GB inbox stored+indexed on the phone - of course you don't need to store the attachments etc.

Anyways, my point was not to suggest a full solution but to say that companies are not incentivized to solve this problem.

Yes, people are proposing that people download their email. How is that controversial? That's how email works. It's not like emails are large.
To be fair, mobile clients WOULDN'T download the entire email catalog for local search. It gets up to X days locally and the rest will be searched online. But you are right though, you really can't build the index remotely of you want end-to-end encryption.
You don't need to store the data locally, you can just store indexes and filters. Keep them up to date in an online fashion and the cost is a fraction of the storage space required, and some extra CPU time spend locally.