News for hackers. Stuff that matters.

A comment on Gmail Will Warn If Message Is Not Authenticated/Encrypted. Parent comment

Re:Gmail Will Warn If Message Is Not Authenticated/Encrypted by cromwellian on Tuesday February 09, 2016 @04:30PM (#11068937)
How do you run an efficient server-side search without maintaining a parsed index? I have 40,000 emails in my inbox. You want this to be linearly scanned everytime?
[ Parent | on HN ]
Re:Gmail Will Warn If Message Is Not Authenticated/Encrypted by nyan4 on Tuesday February 09, 2016 @04:52PM (#11069076)
Indexing for search != parsing for advertisement.
[ Parent | on HN ]
Re:Gmail Will Warn If Message Is Not Authenticated/Encrypted by cromwellian on Tuesday February 09, 2016 @05:51PM (#11069467)
Once you have to index or parse the email for search, it can no longer be stored as ciphertext, that is, end to end encryption interferes with search.

At best, you could search headers if they aren't encrypted.

Until a viable ciphertext search scheme arrives. (there are some, but everyone I've seen has some caveat or hole)

[ Parent | on HN ]
Re:Gmail Will Warn If Message Is Not Authenticated/Encrypted by digdug2000 on Wednesday February 10, 2016 @03:13AM (#11071364)
You could do everything client side as well and just store encrypted indices on the server. Probably not a good idea, but not the end of the world.

I don't think users actually care though. Google's attempt to redefine "end-to-end encryption" to include decrypting something mid route bothered me. This... meh.

[ Parent | on HN ]
Re:Gmail Will Warn If Message Is Not Authenticated/Encrypted by Sir_Substance on Tuesday February 09, 2016 @04:40PM (#11068994)
Yeah, I really do, it'd be funny as hell. Jesus fuck man, clean your inbox.
[ Parent | on HN ]
Re:Gmail Will Warn If Message Is Not Authenticated/Encrypted by cromwellian on Tuesday February 09, 2016 @05:49PM (#11069459)
My inbox is clean, those emails are archived. I still want to search them.
[ Parent | on HN ]