Hacker News new | ask | show | jobs
by chrysoprace 2409 days ago
> JMAP is therefore not introducing any new measures to address end-to-end encryption.

It seems like a wasted opportunity to not make E2EE a primary focus of a new email standard. Hopefully there will be standard extensions down the road to add this if JMAP takes off.

2 comments

I've been reading about this, and there seems to be a lot of debate still on implementing E2EE via the email providers. From what I have gathered most email providers use TLS and encrypt data on disk at rest, but they feel like its pointless to implement E2EE, because by default as 99% of incoming emails are all unencrypted, and 99% of emails need to leave your email unencrypted(otherwise the receiving email party would be unable to read the encrypted message)
On the page they also bring up a great point: a bunch of optimizations allowed by JMAP (including storing attachments as blobs and separating their payloads from other content) wouldn't be possible if the individual messages were E2E encrypted.
How would spam detection work?
Maybe have a free unencrypted service, then use those users to train the spam detection. Then the spam detection runs client side for paid users.