Gmail E2E is as terrible as expected

Re:Gmail E2E is as terrible as expected by smileybarry on Sunday April 06, 2025 @05:46PM (#43605230)

Yep, while I like moving all snail mail to email, I hate that (almost) every single service now just sends a "monthly/quarterly report now available in your account area!" email. A rare few of them at least offer the option of just sending it attached (with the default being a useless reminder email), but most are essentially a chore, because nearly everything here uses phone+2FA as login rather than a password or passkey.

[ Parent | on HN ]

Re:Gmail E2E is as terrible as expected by OptionOfT on Sunday April 06, 2025 @06:59PM (#43605699)

For that reason I actually have decided to get everything via snail-mail.

When BofA sends me a new statement I need to:

    * click on the link in my inbox
    * wait for the email-provider to scan the email (and Office 365 does sometimes tell me they can't scan the link)

(either)

    * Enter my username & password
    * Select that I want my 2FA via call or text
    * Wait for the call or text to arrive
    * Enter it (now I'm signed in)

(or)

    * search my house for my YubiKey
    * lean over to insert YubiKey
    * click cancel on the Windows popup for the passkey
    * click cancel on the Bitwarden popup for the passkey
    * click Physical key on the Chrome / Edge popup for passkeys
    * put in YubiKey pin
    * lean over again to physically touch YubiKey

(end)

    * Click no on the next credit card offer
    * Navigate to Credit Cards
    * Click the Credit Card
    * Click Documents
    * Click current statement

when I'm on my walk (which I do anyway)

    * insert key in mailbox
    * (no delay) open mailbox
    * (no delay) take out letters
    * (no delay) close mailbox
    * (no delay) remove key
    * walk home
    * open statement
    * validate statement
    * trash statement

Even with passkeys there are too many where the flow can / purposefully is interrupted.

[ Parent | on HN ]

Re:Gmail E2E is as terrible as expected by fn-mote on Sunday April 06, 2025 @07:13PM (#43605764)

> because nearly everything here uses phone+2FA as login

Here in the US we only wish things were that secure.

Unless by 2FA you mean “code sent via SMS”.

[ Parent | on HN ]

Re:Gmail E2E is as terrible as expected by smileybarry on Monday April 07, 2025 @05:14AM (#43609405)

Sadly I mean "code sent via SMS", which is one reason why I haven't automated much of the retrieval for these things.

[ Parent | on HN ]

Re:Gmail E2E is as terrible as expected by LexGray on Sunday April 06, 2025 @06:01PM (#43605323)

Passkey does seem like it should include functionality to encrypt and sign all email and SMS automatically. A missed opportunity.

[ Parent | on HN ]