Dear Niels and everyone else who has
concerns with the OONI team using GSuite,
Thank you for sharing your concerns.
As privacy advocates, we very much understand your concerns. I
personally understand your concerns, having hosted multiple "How
to de-Googlize your life" workshops for the public over the last
years and having investigated Alphabet as part of my previous job.
However, I'm sure you understand that (for better or for worse)
life is full of trade-offs that we all inevitably need to take
into account when striving to do our jobs the best that we can.
Our job - our as in OONI - is that of enabling people around the
world to measure internet censorship.
To this end, our small team of only 4 (!) developers design,
build, and maintain the following software components:
1. OONI Probe (i.e. multiple free software tests designed to
measure internet censorship)
2. Backend for OONI Probe
3. OONI Probe web UI
4. OONI Probe mobile app for Android
5. OONI Probe mobile app for F-Droid
6. OONI Probe mobile app for iOS
7. OONI Probe distribution for Raspberry Pis
8. OONI data processing pipeline
9. Proteus (probe orchestration)
10. OONI Run
11. OONI Explorer
12. OONI API
I think it's clear that our small team is building and maintaining
a lot of software and services. And over the next year, OONI will
be building and maintaining much more software, so the list will
go on.
In addition to the above, we also ensure that our servers are up
and running so that we can provide daily updates on internet
censorship based on data collected from more than 200 countries.
We also write research reports, do data analysis, and many more
activities.
And so while we're not particularly happy about GSuite, we see it
as a necessary (and temporary?) solution. We simply don't have the
resources to maintain an email server (and ensure it's properly
secured).
We can of course be reached via encrypted PGP email, and many do
so. I should probably emphasize that we receive a fair amount of
emails from Gmail users. And when it comes to really sensitive
communications, we obviously don't use email.
All the best,
Maria.
On 22/10/2017 20:41, Niels Elgaard Larsen wrote:
Iain R. Learmonth:
Hi,
On 22/10/17 11:39, Arturo Filastò wrote about moving to GSuite.
Just to add to this, for those that are still concerned. The OONI
website does list a GPG key that can be used to send encrypted emails
that are not readable by Google:
And I am still concerned.
How much of the email is PGP encrypted?
https://ooni.torproject.org/about/
Setting up a mail server is easy, but keeping a mail server running,
keeping a lid on spam and preventing your mail server from ending up in
reputation systems as "spammy" is a constant struggle.
It is really not that hard.
And even if some russian spamservice would mark Tor-emails as potential
spam, is that reason enough to give it to Google?
While it is sad that Google has been chosen, I can well understand the
reasoning behind doing so.
Thanks,
Iain.
_______________________________________________
tor-project mailing list
tor-project@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-project
_______________________________________________
tor-project mailing list
tor-project@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-project
--
Maria Xynou
Research and Partnerships Coordinator
Open Observatory of Network Interference (OONI)
https://ooni.torproject.org/
PGP Key Fingerprint: 2DC8 AFB6 CA11 B552 1081 FBDE 2131 B3BE 70CA 417E