Reply to post: Re: A whiff of hypocrisy?

Google wants to add 'not encrypted' warnings to Gmail

Anonymous Coward
Anonymous Coward

Re: A whiff of hypocrisy?

I'm afraid it could shift the perception from true forward secrecy to just "encrypt the comm channel". While encrypting (properly - authenticating also!) the channel is part of the solution, it's not the solution.

But companies like Google may fear that people asking for perfect forward secrecy may impact their business, so in these times when everybody asks for "encyption", they need to shift that need to something that doesn't impact them. So make them believe some "encryption" makes them secure, but avoid to give them what they really need.

After all, do you feel safe to send your credit card number to a site just because it uses "HTTPS"? Or you should be also worried about where and how that number is stored, and for how long? Just encypting the channel may be good for very transient and short-lived data which aren't stored and/or have no value after a short time. For the other data, channel encryption is just a little part of a true solution.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon