Hacker News Reader

Comment by anonypotamus | Hacker News Reader

This is better for user privacy. Marketers will have to find another less invasive way.

"In some cases, senders may be able to know whether an individual has opened a message with unique image links"

https://support.google.com/mail/answer/145919?p=display_imag...

This is an inherent flaw with auto-displayed mail images loaded on demand. They are easily rigged to act as read receipts.

Hard to see how that's a privacy enhancement.

Well, you have the option to turn it off. They could also be serving the images cached which wouldn't indicate anything to the sender, and they are just adding this caveat to be extra cautions. Not to mention that marketing stuff has its specific tab in gmail.

Tracking images in emails are uncacheable specifically because they need to be traceable. For a set of users, you'd send out the same email, but use a different image for each:

    www.example.com/banner.png?userid=1
    www.example.com/banner.png?userid=2
    www.example.com/banner.png?userid=3

and so on. How would you propose caching that? You can't simply ignore the GET parameters since many web services use those to distinguish between different files. And anyways you could even get around that by using URLs like

    www.example.com/userid/1/banner.png
    www.example.com/userid/2/banner.png
    www.example.com/userid/3/banner.png

While I do applaud the decision to route all images through Google servers to hide the user's location, I'm disappointed that images are enabled by default.

>While I do applaud the decision to route all images through Google servers to hide the user's location, I'm disappointed that images are enabled by default.

It is a usability feature.

I can attest that my own mother has no idea why the pictures in her emails don't show up. If this keeps her privacy (or at least what shreds of it remain) and makes it easier, then I don't have a problem with it.

Personally, spam is a thing of the past. Between using multiple email addresses that forward to a few main ones, to spam assassin and Gmail's spam filtering, I haven't seen a spam in years. Even if I did, I highly doubt it would get me to open it.

That leaves promotional emails, which, if I'm opening, I already have an interest in and might as well just see the images. It saves me a click. Rare would be the case where I'm interested in an email enough to open it, but not enough to see the images it contains (which often make reading it a more pleasant experience in the case of headers, gradients, and the like).

Get hash of image file, serve cached version of fetched version if hash matches.

The point isn't that the image be shown in the browser, it's that it is requested from the email sender's server. That's how email tracking works. If you're still making the request then this approach doesn't work. (Unless I'm missing something?)

This is another one of hose "better for privacy" changes that google implements to keep all of your private data in their hands while not sharing it with others unless money is involved.

Yes, we heard the same complaint when they switched to SSL by default. How do people write things like this seriously?

Do they have gmail passwords so only they can advertise on my email?

Truthfully I rather have my privacy invaded by thousands of small companies getting only a tiny chunk of my info, than by one behemoth with access to everything I do online.

If you decide to use Gmail, Google will already know what you’re doing and where you are, for better or worse. The choice is between Google having access to everything you do in connection with your email, or Google having access plus thousands of small companies having tiny chunks.

That's why I'm trying to minimize my google footprint.. Googprint (TM) :)

Reply on news.ycombinator.com