When you send an email from Gmail to someone what measures do they have in place to make sure that the email is not read by man-in-the-middle attacks, or other servers that the email is routed through?
If spam filters can read what's in the message then surely email is super dodgy and we really should not be using email to send important information?
Simply said; it isn't.
By security I'm guessing you mean that nobody else can read your mail.
In essence security depends on 3 points; A origin;B path, and C destination.
If you are sending mail from you computer; and you consider your computer secure; that's it for point A. If you are sending from webmail interface; gmail uses ssl that helps; but sending from your computer is still more secure.
in case of path; you need to encrypt in a way that will be difficult to crack; and agree with receiver how to decrypt it. For example pgp is quite popular and simple.
Everything mentioned for point A works for point C
"email is just plain text sent over multiple machines, all of them capable of reading the content of the mail"
to achieve what you want you have to accomplish 3 - 4 goals:
these goals are achieved by using cryptography. for email it is common to use either gpg or pgp. anything else is bogus, the ssl/https-connection towards the gmail-webinterface is just to protect your password to your account and the contacts etc, NOT the email you sent from within the interface since "
"email is just plain text sent over multiple machines, all of them capable of reading the content of the mail"
Yes, you should not be sending confidential information via unencrypted email.
And since emails can and do get lost on the way to the recipient, you should probably not be sending important information in there either.
If you're sending confidential information from Gmail the G is reading and storing your email. I would be more worried by that than some (highly unlikely) man in the middle attack. Google scan everything, store it forever, pass anything 'suspicious' to the FBI, and use everything you type to profile and then advertise at you.
That's way more frightening than some snooper down the line. Which is unlikely given that the route your message takes through the internet is essentially random, and even to cover some of the possible routes the attacker would have to compromise either the large bulk servers at the ISP at one or other end of the route, or else the major servers on the internet backbone. How likely is that?
No, I'd be more worried by what you're letting Google see.
only GPG can secure your email for 99%. But it cant secure if your receiver or you have some viruses in your computer =)
Gmail's now-default HTTPS setting encrypts the information between your browser and their servers, protecting it from third-parties that could try to access it from, say, public Wifi. Once you send an email, however, you're depending on the servers between you and your recipient, and there is no guarantee of security in that case.
Gmail now requires an HTTPS connection between you and the Gmail server(s). Further, all transfers between Google servers are similarly secured.
Where it goes after Google sends it off to your email server is anyone's guess. As has been mentioned, you should not send confidential information via email.
(Staying at the forefront of email security and reliability: HTTPS-only and 99.978% availability)
