News for hackers. Stuff that matters.

A comment on Client-side encryption for Gmail is now generally available. Parent comment

Re:Client-side encryption for Gmail is now generally available by prophesi on Tuesday February 28, 2023 @12:19PM (#34971969)
At the very least, I can confirm that ProtonMail and Apple's Mail clients let you search through the message contents of encrypted email. I'm sure there's a performance hit, and admins wouldn't be able to search through the encrypted emails of their Workspace users, but that's a much more reasonable tradeoff.
[ Parent | on HN ]
Re:Client-side encryption for Gmail is now generally available by londons_explore on Tuesday February 28, 2023 @12:36PM (#34972219)
I'd be interested to know the implementation... Most search-over-encrypted-documents implementations either don't scale well (eg. require the client to do all the indexing and upload the encrypted index), or have reduced privacy (allowing the server to infer which words are in which document).
[ Parent | on HN ]
Re:Client-side encryption for Gmail is now generally available by JoshTriplett on Tuesday February 28, 2023 @01:10PM (#34972661)
> require the client to do all the indexing and upload the encrypted index

Or just require the client to do the indexing and the searching, and not upload the index anywhere.

[ Parent | on HN ]
Re:Client-side encryption for Gmail is now generally available by prophesi on Tuesday February 28, 2023 @01:30PM (#34972933)
Yep. Not sure how Apple/Proton implement it, but that's exactly what Tutanota does. https://tutanota.com/blog/posts/first-search-encrypted-data
[ Parent | on HN ]
Re:Client-side encryption for Gmail is now generally available by londons_explore on Wednesday March 01, 2023 @02:30AM (#34979709)
And when you log in from a new device...? Do you now need to wait days while 1000,000 emails from the last decade are all downloaded and indexed?
[ Parent | on HN ]
Re:Client-side encryption for Gmail is now generally available by prophesi on Wednesday March 01, 2023 @01:15PM (#34986087)
That's an issue with or without client-side encryption. Even with IMAP, you have to download the message before its contents can be searched. While subject/sender/recipient can be searched instantly with IMAP, regardless of encryption.
[ Parent | on HN ]
Re:Client-side encryption for Gmail is now generally available by pseudalopex on Saturday March 04, 2023 @02:46PM (#35023845)
This is a limitation of your client or server. Not IMAP.
[ Parent | on HN ]
Re:Client-side encryption for Gmail is now generally available by prophesi on Sunday March 05, 2023 @11:43AM (#35031225)
No, it's a limitation by IMAP that is rectified by the server/client.
[ Parent | on HN ]
Re:Client-side encryption for Gmail is now generally available by pseudalopex on Tuesday March 07, 2023 @02:36AM (#35052627)
IMAP's SEARCH TEXT command is at least 35 years old.[1]

[1] https://datatracker.ietf.org/doc/html/rfc1064

[ Parent | on HN ]
Re:Client-side encryption for Gmail is now generally available by pseudalopex on Saturday March 04, 2023 @03:12PM (#35024056)
Maybe if you have that many emails and 3G only and can't load a backup for some reason.
[ Parent | on HN ]