Yahoo sees 'end-to-end' email encryption by year-end
The Internet giant demonstrated new security and safety features for its email service at the South by Southwest festival in Austin, Texas, ramping up efforts to boost privacy since the 2013 revelations about government surveillance.
The new security feature aims to allow non-technical people to use encryption with the click of a button after an initial setup of a few minutes.
A test or beta version of the encryption software is being released for developers, and it is expected to be rolled out to users in the coming months.
"Our goal is to have this available by the end of the year," Alex Stamos, Yahoo's chief information security officer, told AFP.
"Anybody who has the ability to write an email should have no problem using our email encryption."
Privacy advocates say encryption is a valuable tool in thwarting unwanted snooping, but many users find the process daunting, with a need to create complex codes or "keys" for both the sender and receiver.
Yahoo has been collaborating with Google and its Gmail service on the encryption, and the standards will be compatible, Stamos said, so Yahoo and Gmail users will be able to send each other encrypted messages with a single click.
"I think anybody who uses email in the centre of our life needs encryption," Stamos said.
"If you send emails to your spouse or your lawyer or family members, you want to have these messages be confidential."
Yahoo and Google and other online giants took steps to encrypt Internet traffic in the wake of revelations of vast online surveillance programs led by the US National Security Agency, and have argued they never allowed unfettered access to their servers.
The email encryption takes this further by encrypting the content on both ends of the message. Yahoo said another feature soon to be introduced would allow users to bypass the standard password, by getting a one-time code sent to a verified phone each time they log in.
The move would help avoid so-called "phishing" attacks and other manoeuvres that steal a user's password, leading to potential identity theft. The two new measures are expected to improve security and privacy while still being easy to use, Stamos said.
"It's important for our products to be safe as used by normal people," said Stamos.
"Our users face a very diverse set of threats. The biggest threat is probably someone stealing their password, and their account taken over."
He added that encryption and password circumvention may also be important for users living in countries with repressive regimes.
"There are a lot of Yahoo users who live in countries where their freedom of expression and freedom of association is not respected, and where the government is trying to put malware on their computers to track them," he said.
Source: AFP, via I-Net Bridge
Source: I-Net Bridge
For more than two decades, I-Net Bridge has been one of South Africa’s preferred electronic providers of innovative solutions, data of the highest calibre, reliable platforms and excellent supporting systems. Our products include workstations, web applications and data feeds packaged with in-depth news and powerful analytical tools empowering clients to make meaningful decisions.
We pride ourselves on our wide variety of in-house skills, encompassing multiple platforms and applications. These skills enable us to not only function as a first class facility, but also design, implement and support all our client needs at a level that confirms I-Net Bridge a leader in its field.
Go to: http://www.inet.co.za
