Dmail Makes Gmail Vanish - InformationWeek
IoT
IoT
Cloud // Software as a Service
News
7/25/2015
09:06 AM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
0%
100%

Dmail Makes Gmail Vanish

You can make Gmail messages self-destruct with a Chrome browser extension.

Microsoft Office On iOS: Startup Guide
Microsoft Office On iOS: Startup Guide
(Click image for larger view and slideshow.)

Delicious Science, which last year acquired social bookmarking service Delicio.us, has released a Chrome extension that provides Gmail messages with the ability to self-destruct.

After installing the extension, Gmail users can send a message to anyone, whether or not that person uses the Dmail extension, and configure the message to deny access after a period of an hour, a day, a week, or never. In addition, a "Revoke Access" button provides a way to immediately disable access to a protected message.

If the recipient has the Dmail extension, he or she can read the message in Gmail until it expires or is revoked.

If the recipient does not use Dmail, he or she receives a message that says, "This secure message was sent using Dmail. To view this message, simply click the button below."

(Image: Delicious Science)

(Image: Delicious Science)

Clicking on the View Message link calls out to a server operated by Delicious (mail.delicious.com) to retrieve the encrypted message and decrypt it using a key generated locally on the sender's device and passed through Gmail. As product lead Eric Kuhn explained to TechCrunch, "Neither Gmail nor Dmail servers ever receive both the decryption key and encrypted message. Only the recipient and sender can read the email legibly."

After the message expires or is revoked, the text becomes, "This message has been destroyed and is no longer available."

[ Can I get a do-over? Read Gmail Undo Send Plus 3 More Improvements We Need. ]

It's not immediately clear how easy it would be for law enforcement to obtain the encrypted message from Delicious Science and the key from the sender, the recipient, or Google.

The accessibility of Dmail's source code -- Chrome extensions are just collections of JavaScript, HTML, and image files -- may help security skeptics decide whether or not to trust Dmail. The software relies on Gibberish-AES, a JavaScript library for OpenSSL-compatible AES CBC encryption.

However, the presence of JavaScript modules for tracking and analytics suggests this software isn't intended for people who want serious security; rather, it appears to be aimed at people who would like to feel they have more control over their data than regular email affords.

(Image: Delicious Science/Google)

(Image: Delicious Science/Google)

But feeling that something is secure isn't a guarantee that it is. Anyone who understands what Dmail does, and who doesn't want the message to vanish, can simply take a screenshot of the message when it's readable, or a photograph of the screen. (It's not as if cameras are scarce these days.) Also, the text in a decrypted Dmail message can be copied and pasted, unlike, say, a protected PDF.

Dmail isn't the first email software that promises control of information. Confidential CC, Pluto Mail, and GhostMail entered the market recently, all offering to make email messages go away. Snapchat popularized the idea for instant messages. Services such as Microsoft Exchange also offer a way to recall messages sent in error within a corporate domain.

Despite its lack of novelty, Dmail is user-friendly enough that it may find a place among individuals and organizations who want more say in the accessibility of things they've said. The fact that it works with Google's rather popular Gmail can't hurt.

Dmail is presently free and listed as beta software. Placeholders on the Dmail website suggest additional capabilities will be offered to individuals and businesses.

Thomas Claburn has been writing about business and technology since 1996, for publications such as New Architect, PC Computing, InformationWeek, Salon, Wired, and Ziff Davis Smart Business. Before that, he worked in film and television, having earned a not particularly useful ... View Full Bio

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Remmick
50%
50%
Remmick,
User Rank: Apprentice
8/4/2015 | 9:44:51 AM
Re: Dmail
Fun idea, easily thwarted with a print screen,
asksqn
50%
50%
asksqn,
User Rank: Ninja
7/30/2015 | 3:37:47 PM
Get Out of Jail Free Card
Or if you're a high ranking government office holder/agency (cough Hilary cough IRS) you can just disappear hard drive after hard drive by (oopsie) self-destructing it. No questions asked by the Executive Office.
Broadway0474
50%
50%
Broadway0474,
User Rank: Ninja
7/27/2015 | 11:06:24 PM
Re: This message will self-destruct in 30 seconds
I would wonder how long the Chrome extension would continue to work, as these extensions tend to break after a while.
Susan Fourtané
50%
50%
Susan Fourtané,
User Rank: Author
7/26/2015 | 4:41:00 AM
This message will self-destruct in 30 seconds
Thomas, do you think Dmail will become useful, or successful in any way? It's not clear to me if the message can be destructed before it is read. Say, when you send an email and change your mind afterwards. -Susan
SachinEE
50%
50%
SachinEE,
User Rank: Ninja
7/25/2015 | 11:40:31 PM
Re: Dmail
If it were me I would enforce an encryption that takes more time to break than the actual time of the dmail existing. And if it were me the dmail messages would only be sent when the user is online through gmail or hangouts or whatever. As soon as the system knew the user is online it would send the message to the user's computer.
SachinEE
50%
50%
SachinEE,
User Rank: Ninja
7/25/2015 | 11:37:56 PM
Dmail
I like the idea and yes it did come from the idea of Snapchat but it also makes no sense. It would make sense if the email that is being sent had a good encryption along with a self destruct timer attached to it. Otherwise it wouldn't make sense.
Register for InformationWeek Newsletters
White Papers
Current Issue
Cybersecurity Strategies for the Digital Era
At its core, digital business relies on strong security practices. In addition, leveraging security intelligence and integrating security with operations and developer teams can help organizations push the boundaries of innovation.
Video
Slideshows
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Flash Poll