This post is not really about questions I have. I just feel like I need to write this somewhere to express my concern.

First of all, online stores have become a huge part of our society and I admit I heavily rely on that. That alone could be privacy issue but I’d ignore that for the sake of not missing the point of this post.

The problem is rather in the way these online stores send out their receipts. You might already know that emails are by default not client side encrypted. That means your email server admin (Google if you use Gmail, Apple if you use iCloud mail. And Proton if you use Protonmail. Yes Proton claims it stays encrypted as soon as the emails arrive to their server but who can really vouch this? It’s behind the curtain anyway. ) has access to your receipts including of the past.

Now email has been around for a really long time. And the client side encryption part has been worked in a lot of forms such as S/MIME. But none of the online services really implement it even though they contain critically personally identifiable info such as items I bought along with my name & address.

And the thing is even though these online sellers acknowledge this privacy risk, they don’t have options to not email us receipts. For example, Amazon has a dedicated page on their site where I can see the list of everything I bought. That’s literally enough for me. They can stop sending me the receipts in the worst possible way! At least they could provide us with better way (even WhatsApp will do) yet they don’t. This is a severe privacy issue.

I can’t help feeling, with all the sophisticated technology we have at hand, that we deserve better.

  • Matt@lemdro.id
    link
    fedilink
    English
    arrow-up
    5
    ·
    8 hours ago

    What we would need on the long run is simply replace email with a common standard

    That would be ideal, but realistically, if email ever goes away, it would be replaced with a proprietary locked down ecosystem. Likely a messenger app. Link a WhatsApp or Facebook account and you will get messages and notifications through that. I just do not see current tech companies supporting a new open standard for communication.

    Despite all of emails flaws, it is one of the few remaining universal forms interoperable communication with little vendor lock-in. It would be great to have something more modern, but not at the expense of openness and interoperability which is likely what would replace it at the current time.

    • ZeDoTelhado@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      5 hours ago

      That would be a fair concern. Until we collectively understand standards should be open and fairly documented for everyone to use, we are going to have a lot of these “standards but not really” pretty much everywhere (but again, we are asking this of people that also do not see security as being on the top list of considerations. I am sure interoperability is not even know to most)

    • tiz@lemmy.mlOP
      link
      fedilink
      arrow-up
      1
      ·
      7 hours ago

      Yeah. I agree they will definitely go with proprietary solution. I would much prefer something like Matrix adopted. But that has to be blow up in popularity to replace emails…