安全与隐私mako.cc
Google 拥有我的大部分邮件，因为它拥有你所有的邮件（2014）
Google has most of my email because it has all of yours (2014)
2014 — 2025，它一次次回到首页
黑点是上首页（≥ 50 分）的那次投稿，空心点是没冲上去的投稿，点越大分数越高。
导读
作者(2014年)分析了自己社交网络中的邮件往来数据，发现由于大多数联系人都在用 Gmail，Google 实际上能看到他与几乎所有人的通信内容——即使他自己不用 Gmail，隐私也已被别人的选择暴露。文章由此探讨网络效应如何让单一服务商垄断邮件生态。
为什么经久不衰：它揭示的'你的隐私取决于别人的选择'这一结构性问题至今未解，而邮件作为数字身份钥匙的重要性只会越来越高，因此十年来反复被重新提起。
HN 评论精选
自建域名的核心价值是掌握数字身份的钥匙，而非隐私
自建邮箱/域名不是为了隐私。邮箱已经成为现代生活中几乎所有东西的钥匙：银行、学校、应用……一旦失去邮箱访问权就等于失去一切，而且换邮箱极其麻烦，很多服务甚至不允许你更换邮箱，有些还把邮箱当双因素认证。拥有自己的域名至关重要，至于邮件由谁托管反而不那么重要。
cglan查看英文原文
Having your own email/domain isn’t about privacy. Email has become essentially the key to almost everything in modern life. If I lose access to my email I lose access to basically everything I own and it would be a massive hassle to switch emails. Banks, schools, apps, etc. Often times these services won’t even let you change to a new email if you don’t have access to an existing one. Some use email as 2factor. It’s a nightmare. Owning your own domain separately is crucial. Who hosts your email matters less.
在 Gmail 占绝对主导的地区，连政府都依赖它，自建域名更显必要
这在印度更普遍：政府部门办事常直接问'你的 Gmail 是什么'，几乎人人用 Gmail，很少有人有自己的域名。讽刺的是政府一边罚款 Google，一边所有政府邮箱都是 Gmail。我当年分发过上千万 Gmail 邀请码，但 2010 年左右起 Gmail 只用来收新闻邮件等不重要的东西，因为总有一天会被锁号。
Brajeshwar查看英文原文
I think this is everywhere. In India, people in the departments, especially the Governments usually ask, "What is your Gmail?" Almost everyone uses Gmail here and it is extremely rare to find their own custom domain. I'm actually surprised that the Government Departments do not have a service that takes care of these! They will fine Google but almost all of the government email IDs are Gmail. I was one of those that distributed hundreds if not thousands of Gmail invites when it started. However, since 2010-ish, I left Gmail to be just for Newsletters, and the ones that I'm not serious about. I'm always reminded that a day will come when I will just have no access, lock out and be done with it. I had used my name's domain and had used the web hosting provided email service and I felt nice using the likes of `webmaster@brajeshwar.com` (early 2000s). Then I got a shorter domain with our family domain and is, now, powered by Google Workspace (with a plan to move to the competitors soon before the yearly plan expires). I had so many domains under the Google Suite free version since its beta. I did upgraded my primary domain to the paid version, when I had few mail delivery issues so I can talk to a person and that was also the time I realize I cannot go back. That was almost/about 10 years ago.
实用主义者认为便利性值得换取隐私
在 HN 上说这话不受欢迎，但我不觉得 Google 拥有我的邮件是个问题：近乎无限的可用性、全球冗余、最好的搜索体验、免费存储——这个交换条件我目前可以接受，不值得为此折腾。
dav43查看英文原文
Unpopular on HN, but I just don't see a problem with Google having my email, for what they provide me. Almost unlimited uptime, global redundancy, best search experience, storage all for free. I'm ok with the trade off for now. Its just not worth the hassle.
连隐私倡导者都用 Gmail，说明问题的普遍性；作者顺带批评 EFF 言行不一
我最近收到很多来自 Gmail 地址的垃圾邮件，甚至考虑干脆封禁整个域名。文中提到连 EFF 的技术项目主管这种极重隐私的人都用 Gmail——EFF 经常言行不一，比如批评 Amazon 让警方无证访问 Ring 摄像头，自己却把活动直播放在 Twitch 上。
juunpp查看英文原文
I have actually been receiving much spam from gmail addresses lately and have considered banning the domain altogether. > I was surprised to find out that my friend Peter Eckersley — a very privacy conscious person who is Technology Projects Director at the EFF — used Gmail I find that the EFF does this more often than not, like how they also criticize Amazon for giving police warrant-less access to Ring cameras... and then stream their online gatherings live on Twitch. I find their messaging sometimes does not tie well with their actions.
历次讨论
同类还值得读
非法素数
Illegal prime
维基百科条目，介绍“非法素数”：某些素数之所以被称为“非法”，是因为它们经特定编码后，恰好对应一段被法律禁止传播的数据——最著名的是 DVD 解密程序 DeCSS 的代码，有人把…
安全与隐私上首页 5 次 · 2010–2021en.wikipedia.org编辑精选关于 /dev/urandom 的常见误区
Myths about /dev/urandom
（Thomas Hühn 撰写，2014 年首发并持续更新）逐条反驳关于 /dev/urandom 的常见误解：它与 /dev/random 使用的是同一个 CSPRNG，一旦完…
安全与隐私上首页 5 次 · 2014–20202uo.de编辑精选AES 高级加密标准火柴人图解
A Stick Figure Guide to the Advanced Encryption Standard (AES)
一篇用火柴人漫画形式讲解 AES（高级加密标准）算法的经典科普文章。
安全与隐私上首页 5 次 · 2009–2022moserware.com编辑精选指纹是用户名，不是密码
Fingerprints are Usernames, not Passwords
作者（eCryptfs 维护者、Ubuntu 安全工程师）认为指纹等生物特征是公开、不可更改的标识，应视作用户名而非密码，不能当作秘密凭据用于认证。
安全与隐私上首页 4 次 · 2013–2017blog.dustinkirkland.comHTTPS 连接的最初几毫秒（2009）
The First Few Milliseconds of an HTTPS Connection (2009)
逐毫秒拆解一次 HTTPS 连接建立时发生了什么，重点讲 TLS 握手、证书验证、RSA 签名与密钥协商等机制，面向不熟悉该领域的读者。
安全与隐私上首页 4 次 · 2009–2020moserware.com编辑精选