But this isn't a random business. They decided, intentionally, that they wanted to put your personal information in there. True story: I have manually entered personal information (name, email, birthday, phone number) for many of my friends into my email accounts' address books over the years. They have done the same to me. It's expected.

That's what I was saying: If you're going to let people see all your personal info, it should be people you would trust to use that info properly. Facebook stopping Google from importing your info but allowing Yahoo to do so won't protect you at all.

It's not my friends I don't trust, it's Google.

Then you should ask your friends not to enter your info into their Gmail address books, and only give your info to you people you trust to honor that request. That's where the trust comes in. If you give your info to people, you must trust that they will not misuse it, whatever "misuse" means to you. Google's import tool would not sneak onto your friends' computers at night and surreptitiously import your data against their wishes, and lacking that tool will not stop your friends from "giving" your info to Google.

Facebook blocking one method for one company to import your data is not security; it's just corporate warfare.

> Facebook blocking one method for one company to import your data is not security; it's just corporate warfare.

Oh, I realise that. And I realise that some companies are necessarily going to get access to some basic contact information like e-mail addresses anyway if they are also in the e-mail business, because we all use mail services for e-mail to work. The fact that Google are in both the e-mail service business and the data mining business is an unfortunate coincidence in this respect, as far as I'm concerned.

I guess I just don't think it's healthy that in 2011, with all the data mining and all the poor security and genuinely harmful consequences of leaks going on, we still rely on things like unencrypted communication and centralised service providers who have direct access to personal data. We can do better now, and we would collectively be significantly safer and probably significantly happier as well if we did. Swapping Facebook spying on your entire life for Google does not seem like a particularly constructive move in that context.

You don't have friends using Gmail?

I do, and I dislike immensely the fact that this means Google may be data mining personal messages I send privately to friends and I have no way to no or avoid it.

This is one reason all personal communications over the Internet should long since have defaulted to encryption. I don't mind Google offering a useful service, but there's really no (technical) need for them to have access to all that data while they're doing it.

There is no good way for Google to provide encryption within its gmail product without having the user provide the key to the browser/javascript (easily stolen) and or having the key stored on their servers (ease of use).

The unfortunate side effect of encryption is that it is not transparent, it requires users to be completely aware of what is and isn't encrypted and also to be completely aware of where their keys are stored and how they are treated. Defaulting to encryption would just make it so that the majority of the people are unable to communicate and or use the internet at large.

Most people do not use gmail with IMAP so suggesting client side is not going to really work. With encryption stuff like mailing lists will not work either, because you'd need to individually encrypt the message for each and every single recipient on the mailing list.

Oh, come on. Are you really suggesting that a world that managed to build the Internet, where the mathematicians developed concepts like public key encryption and password hashing, where many banks routinely issue physical tokens for two-factor authentication before access to secure systems, and where several nations run national ID databases, we couldn't manage to devise a system where every user has unique credentials to access sensitive systems without those systems themselves being able to decrypt the user's data?

That's a load of nonsense. In the grand scheme of things, solving that problem is easy. We just haven't done it yet, because while Pandora's box is open, not enough people have yet come down with plague.

Sadly, that means things are going to have to get significantly worse before they get better. Still, as the ever-increasing leaks turn into more concrete problems like bad credit because your card was swiped, being arrested based on bad intelligence, or having your political career destroyed because the wrong private comments leaked out, sooner or later enough people with serious influence are going to get hurt for the situation to change.

     we couldn't manage to devise a system where every user 
     has unique credentials to access sensitive systems 
     without those systems themselves being able to decrypt 
     the user's data?

In the case of the GMail web interface, which I can tell you it's better than any desktop client I ever used, no, it isn't possible.

It isn't, because then Google cannot render email messages in the browser for you. And if it did decryption with Javascript, it's still their client and their client can still send back information about your emails to them.

Then you've got the problem of losing functionality. I love GMail because it does a good job of searching through my emails, or filtering them. And, ever since I switched to GMail, my spam problems are over.

Of course you could argue that with encrypted emails, spam is eliminated because you can just filter away messages for which you don't have a decryption key.

But this also represents a usability problem - getting the decryption key of every user that sends you email it's a PITA; and it would also prevent unsolicited emails that you do want (like old friends contacting you for the first time, or job offers).

Really, for encrypted email to work, you have to trust the client and it cannot be the default.

I don't think it would eliminate spam - the system would probably use PGP key servers to avoid the hassles of key sharing.

But yes, it's an usability nightmare now that everyone is using webapps. And even with native apps, having to copy the private key from your computer to your smartphone would be over most people's heads.

Well, here in Portugal (and I hear in Belgium they have a similar system) our national ID card can sign and encrypt data using an internal private & public keys. That could be used to encrypt email securely even on a rogue machine. The main technical problem is the lack of readers. The actual main problem is user education - nobody knows how to work with them.

How would it encrypt email on a rogue machine, securely? If the machine is rogue and has all key presses and has the plaintext how can it be secure then? Sure it is encrypted but it is already compromised.

Oh, sure, the current email is compromised, but not the key (since the encryption/decryption is performed by the card itself). The advantage is that you can use a public machine to check a non-important email without giving them the keys to all others or letting them email faking your identity.

How do you know an email is non-important if it is encrypted?

You usually with PGP don't encrypt neither the sender nor the subject, just the contents, it shouldn't be hard to decide based on that information.