I'm not asking whether it is ethical - that would be a totally different question.
I'm asking whether it is legal?
In my book - in my way how I interpret consensual reality - once I press SEND
button it is transmitted via email client, via email server, via internet, to a destination email server.... On the way there are so many entities that can intercept the traffic that I effectively consider all my communication public.
Event when using GPG / PGP:
- I don't trust myself (I'm yet to learn reliable way of generating private key)
- I don't trust my device (see what they did to Snowden's laptop)
- I don't trust the recipient (they can publish it online)
I'm thinking about implementing a buffer system:
- email is received
- automated reply: "we consider your email public, 7 days to opt-out"
- sender has an option to opt-out, ignore, or edit the email (to remove non-public bits of information)
- after 7 days with no action it defaults to be public
Would that system make it any more legal?
UPDATE: I'm still thinking about designing email system. Maybe best of two worlds:
- one public that goes directly to email group
- one private, that strongly suggest all messages to be encrypted
- (general philosophy - full transparency, everything in public - without infringing anyone's right and playing by the cultural norms accepted by society)
- THINK: email password resets are not compatible with public email inbox?