Should our top spies be using Gmail?

In light of the Gmail-related scandal involving former CIA chief David Petraeus, one has to wonder if, given the relative ease by which an intelligence agency — or just about anybody — can break into a private email account, government officials entrusted with the nation’s most sensitive information should be allowed to keep personal email ...

By , a former national security reporter for Foreign Policy.
Wikimedia Commons
Wikimedia Commons
Wikimedia Commons

In light of the Gmail-related scandal involving former CIA chief David Petraeus, one has to wonder if, given the relative ease by which an intelligence agency -- or just about anybody -- can break into a private email account, government officials entrusted with the nation's most sensitive information should be allowed to keep personal email accounts while in office?

In light of the Gmail-related scandal involving former CIA chief David Petraeus, one has to wonder if, given the relative ease by which an intelligence agency — or just about anybody — can break into a private email account, government officials entrusted with the nation’s most sensitive information should be allowed to keep personal email accounts while in office?

True, Petraeus’ email was never actually broken into or hacked by the FBI. Agents gained access to his naughty notes by monitoring Paula Broadwell’s email and then asking Broadwell if she was having an affair with Petraeus. She fessed up and gave them access to her computer and with it, even more of his emails. Nevertheless, the very revelation that our nation’s top spy used at least one relatively unsecure Gmail account has prompted people to raise the above question.

I recall being surprised whenever one of Petraeus retired predecessors would reply to my emails from an AOL email account (insert ‘they still exist’ joke here) or something equally pedestrian. It just seems a little odd that people with access to incredible secrets use the same email services the rest of us do. (Granted, the former officials I email with have been out of office for years, sometimes decades. But don’t you just expect former spy chiefs to use some tricked out, semi-creepy, super-secret email? Maybe that’s just me.)

If hacked, these emails could reveal plenty about the personal lives of their owners who hold high office. Hackers probably wouldn’t find state secrets, but they could find plenty of personal information — travel plans, info about friends and family, online purchases, bank accounts, the list goes on and on. As Google knows for business purposes, a look at someone’s email can paint a pretty valuable picture of who they are. Google uses this information to sell ads tailored to your interests. You can imagine what spies would do with it.

Still, there are questions about what type of service officials could use — perhaps something like Hushmail or TigerText or some NSA-furnished email — and how effective it would be. Would these texts and emails be monitored by the FBI for intrusions? (This would raise some interesting privacy issues, especially for the acquaintances of the government officials.) Even if top U.S. government officials use secure services for their personal emails and texts, is it realistic to assume that their personal information could be kept safe if their acquaintances are using unsecure email and texting services?

One noted IT security expert familiar with the intelligence world that I spoke with said that while it’s surprising that officials such as CIA directors use Gmail and similar email clients, it would be challenging to develop a secure method for them to transmit private information.

"I don’t really think the government has the ability to deploy something like that, and one of the reasons why people use these [private] systems is they don’t want that same level of monitoring going on with their private emails that they would get under any government supplied system," said the expert.

The expert recommended that CIA directors and the like take a page from private business executives’ playbook and use Gmail’s two-step authentication system, which is, according to him much more secure than competitors such as Yahoo (the result of a major hack Google suffered in 2009), and then hire an outside company to scan their laptops, smartphones, and tablets for intrusions every few days. "You tell ‘em, ‘Don’t log into the hotel PC, don’t log into the airport kiosk, none of that kind of stuff.’"

These frequent scans are vitally important since they will be one of the only ways to protect against spear-phishing attacks by foreign intelligence agencies that have hijacked the email accounts of a VIP’s acquaintances.

At the end of the day, the expert reiterated, public officials should simply keep sensitive info out of their email.

"What could somebody find if they just logged into your email one day," he said. "Is your social security number in any of the emails, your tax return? I go through periodically and I just purge everything I can find."

One government official who seems to get this is Department of Homeland Security Secretary Janet Napolitano, who doesn’t use email, partially out of concerns about its vulnerability to hacking.

John Reed is a former national security reporter for Foreign Policy.

Read More On Green Technology

More from Foreign Policy

Children are hooked up to IV drips on the stairs at a children's hospital in Beijing.
Children are hooked up to IV drips on the stairs at a children's hospital in Beijing.

Chinese Hospitals Are Housing Another Deadly Outbreak

Authorities are covering up the spread of antibiotic-resistant pneumonia.

Henry Kissinger during an interview in Washington in August 1980.
Henry Kissinger during an interview in Washington in August 1980.

Henry Kissinger, Colossus on the World Stage

The late statesman was a master of realpolitik—whom some regarded as a war criminal.

A Ukrainian soldier in helmet and fatigues holds a cell phone and looks up at the night sky as an explosion lights up the horizon behind him.
A Ukrainian soldier in helmet and fatigues holds a cell phone and looks up at the night sky as an explosion lights up the horizon behind him.

The West’s False Choice in Ukraine

The crossroads is not between war and compromise, but between victory and defeat.

Illustrated portraits of Reps. MIke Gallagher, right, and Raja Krishnamoorthi
Illustrated portraits of Reps. MIke Gallagher, right, and Raja Krishnamoorthi

The Masterminds

Washington wants to get tough on China, and the leaders of the House China Committee are in the driver’s seat.