[LINK] Telstra Clouds its Profit Results

[Karl Auer]

On Sat, 2012-02-11 at 13:56 -0300, Fernando Cassia wrote:
> And in the case of GMail, the AJAX web-based client does not natively
> support encryption, so you have to dump it and use a non-cloud based
> reader.
> 
> If you give your encryption keys to any cloud-based system, you might
> as well not be using any encryption at all, as that would protect your
> emails only "in transit" and not from spying by the site operators
> themselves.

Well - yes. Any system where you have to put your private keys in the
hands of another entity means including that entity in your trust
system, at least for the material that is being carried by that entity.

However, even if you don't trust the cloud provider or their mail system
does not support encryption, you can still use it, it's just less
convenient - send your stuff as encrypted attachments. Again, it depends
on what it is worth to you to have your confidential emails kept
confidential.

Regards, K.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer (kauer at biplane.com.au)
http://www.biplane.com.au/kauer

GPG fingerprint: AE1D 4868 6420 AD9A A698 5251 1699 7B78 4EEE 6017
Old fingerprint: DA41 51B1 1481 16E1 F7E2 B2E9 3007 14ED 5736 F687
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 230 bytes
Desc: This is a digitally signed message part
URL: <https://mailman.anu.edu.au/pipermail/link/attachments/20120212/185e866c/attachment.sig>