Re: Scope for self-destructing email?

Brian E Carpenter <brian.e.carpenter@gmail.com> Tue, 15 August 2017 01:32 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB5A113247E for <ietf@ietfa.amsl.com>; Mon, 14 Aug 2017 18:32:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9REzdg7XDLH0 for <ietf@ietfa.amsl.com>; Mon, 14 Aug 2017 18:32:44 -0700 (PDT)
Received: from mail-pg0-x22e.google.com (mail-pg0-x22e.google.com [IPv6:2607:f8b0:400e:c05::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1934E1321B6 for <ietf@ietf.org>; Mon, 14 Aug 2017 18:32:43 -0700 (PDT)
Received: by mail-pg0-x22e.google.com with SMTP id v189so57842315pgd.2 for <ietf@ietf.org>; Mon, 14 Aug 2017 18:32:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:organization:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=/eLwelNjSMsmANVpsYOOh4eg2sV1i7YgE2WjW1jcqhg=; b=gxXCrcmcKmtGlB5f/hbKsQaZiU5kmkcElXdcUqf7nPQEzN3CPshaZpcDiUY/DM/aPb 5K0muDfJkh0LhT1xKcdYqm3Dc9qIbEEoQm+oOMucWDJipiR9l90H4ePIShB8+9q3EoLD 0pSYFbz64EiLjGc7CLk1rdc8lMYbp2eogoLEwfkTlU/XHqoi1JCUKuUofkTOdRu4GjDo pVQD9QBf5CAw9ThgiOYCSunixuEgijagbZdS2s6f/258YpEIM9X5MOAqb5A4ioOmoOxf NpT8B53/AgPLhptdjxBMzk6lQxuTS3+mc1xe7IiHNfgRaIvUU/BR+njvIkIYXERYZQRb uMsw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:organization :message-id:date:user-agent:mime-version:in-reply-to :content-language:content-transfer-encoding; bh=/eLwelNjSMsmANVpsYOOh4eg2sV1i7YgE2WjW1jcqhg=; b=IACP0iiYSx9omvevrycr8B4YK4Ba4bBMXF5oznd1fAlBDbHjA1tG0vtLUrivHh5v8u YheXIDxw9bGEzutpcLwNFXosj38VYT7dPMRHyV3RHOCPEMRCWTtLo9cCse/RDAT+8Dg4 TZZij1nxS/e8EidoXsy0RuPEVrGEHzpYzMmMZjtlPnfoghLVmJFG2Nrz6WjwlQzXTBYw 8TadhGkpvqc9B1m2IsHHcmMKdvKcQk9Cr+HO4VWusmMls77y9Kc1Bciy2LiHFI9kW5Fn x9HZZUC8e1Pmwr/wQ1A4tRwchyMLnMQ7VtB7VlKyF2iSGd1TboToJZB2S7FrpJUvsthI fWKw==
X-Gm-Message-State: AHYfb5jXXyq5c2aEcAR7AODIZwuIfhUYoiDAPKxVtQgxu95IS4X7xHDi hh0oCu7P6r5BpP8A
X-Received: by 10.84.177.67 with SMTP id w61mr30454313plb.112.1502760762453; Mon, 14 Aug 2017 18:32:42 -0700 (PDT)
Received: from ?IPv6:2406:e007:521f:1:28cc:dc4c:9703:6781? ([2406:e007:521f:1:28cc:dc4c:9703:6781]) by smtp.gmail.com with ESMTPSA id v9sm16379848pgo.39.2017.08.14.18.32.40 for <ietf@ietf.org> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 14 Aug 2017 18:32:41 -0700 (PDT)
Subject: Re: Scope for self-destructing email?
To: ietf@ietf.org
References: <bc180881-4562-4b97-a625-51ef29770d9f@email.android.com> <6ce40fd4-3de7-b016-55f8-68b96df33333@alumni.stanford.edu>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
Message-ID: <a12ac1b5-f6a9-679c-23a2-61e715c43016@gmail.com>
Date: Tue, 15 Aug 2017 13:32:40 +1200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1
MIME-Version: 1.0
In-Reply-To: <6ce40fd4-3de7-b016-55f8-68b96df33333@alumni.stanford.edu>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/rD7MtdiLmc4iV3k2gdebxUmgdmw>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Aug 2017 01:32:47 -0000

On 15/08/2017 08:05, Randy Presuhn wrote:
> Hi -
> 
> On 8/14/2017 12:53 PM, Matthias Merkel wrote:
>> I think however that this system would mostly find use in systems like 
>> governments or maybe communication between whistleblowers and news 
>> outlets. In these cases you can trust the receipient server to delete 
>> the message when being told to do so.
> 
> Which governments can actually be trusted to this extent?
> 
> More seriously, how could you have any confidence at all that
> unauthorized (or even "lawful intercept") copies of the message
> would be deleted?

You can't. I have destroyed Message-ID: <CACZ1GipivEf31iHchaM1OPFQF4QkfVRGVNsY_vVx=J8oFZ0JZA@mail.gmail.com>.
Is that true? How do you know it's true?

    Brian