Tag Archives: email

Dmail enters ring for making users feel like they have control of their email

Dmail is now in the Chrome store. Delicious Science, which last year acquired social bookmarking service Delicio.us, has released this Chrome extension that provides Gmail messages with the ability to self-destruct.

After installing the extension, Gmail users can send a message to anyone, whether or not that person uses the Dmail extension, and configure the message to deny access after a period of an hour, a day, a week, or never. In addition, a “Revoke Access” button provides a way to immediately disable access to a protected message.

If the recipient has the Dmail extension, he or she can read the message in Gmail until it expires or is revoked. Dmail has designed the extension so that the neither Gmail nor Dmail servers ever receive both the decryption key and encrypted message. Only the recipient and sender can read the email legibly.

The accessibility of Dmail’s source code — Chrome extensions are just collections of JavaScript, HTML, and image files — may help security skeptics decide whether or not to trust Dmail. The software relies on Gibberish-AES, a JavaScript library for OpenSSL-compatible AES CBC encryption.

However, the presence of JavaScript modules for tracking and analytics suggests this software isn’t intended for people who want serious security; rather, it appears to be aimed at people who would like to feel they have more control over their data than regular email affords.

Concerns about real security would include the relatively weak encryption being used in the package. A further question is what is yet the friction offered to authorities who seek the keys to a message from all of the parties involved. But the package has addressed accessibility concerns with the wider community.