Brazilian postal service talks about "anti-snooping" email system

Brazilian postal service talks about "anti-snooping" email system

Summary: The organisation discusses the drivers behind the project, aimed at fending off security risks

TOPICS: Security, Government

Earlier this week, it emerged that the Brazilian government has asked Correios, the national postal service, to look into the possibility of developing of a public webmail platform.

The aim of the locally-hosted "anti-snooping" alternative is to protect citizen data following the recent allegations that the US government has been monitoring data on Brazilian citizens, including president Dilma Rousseff. We talked to Correios about the initiative. 

Repurposing existing systems

Correios is one of the biggest state-owned companies in Brazil and employs more than 115,000 people across the country, with a massive IT infrastructure supporting its operations. According to government ministers, the development of online security products such as digital certificates had been an area of focus at Correios in the last couple of years, so the project is not a knee-jerk reaction to the NSA episodes.

The postal service maintained an email system for end users, CorreiosNet, which was phased out earlier this year. So clearly the idea was not to return to that space - that is, until they the organization was tasked with scoping out the national email service. 

According to the vice president of IT and infrastructure at Correios, Antonio Luiz Fuschino, the initial idea is to reuse the foundations of a "digital correpondence system" which has been developed since 2012, but as a corporate service.

"The Ministry of Communications asked Correios to look into the feasibility of offering that service to citizens for free," Fuschino said.

"We have technical structure and skills to build for the development of the system, but we may also bring more personnel in and start partnerships," he added, in an indication that Correios will have to scale up its IT operations if the service becomes a reality.

According to Fuschino, the organization is figuring out the costs involved in offering email servces to an online population of more than 100 million people. 

"Costs will be met through partnerships and advertising, just like other email services that are already available."

Will information be safer?

The future email service would use encryption to prevent content from being read by anyone but the intended recipients and data will be hosted in datacenters located in Brazil.

Will citizen data really be safer if it is stored away from the prying eyes of other countries? The government believes that is going to be the case, but industry observers are not so sure about that.

"Storing data in Brazil should, in theory, make it more difficult for external parties to access information. But there is never a 100 percent guarantee - you often see instances in Brazil where people have been able to access to tax information, which is held by the government and should be safe," says IDC telecoms analyst João Paulo Bruder.

Why the postal service?

Is Correios the most appropriate department to handle a public email service along the lines of Gmail? In theory, yes, because since 2011 the company is allowed to provide digital services. 

The Brazilian government also owns Serpro, the Federal Data Processing Service, which is the country's largest public IT organisation and provides services including tax self-assessment tools, national insurance and driving license records to name a few.

"Correios does not have expertise in terms of email management, but I suppose that is not what this is about: whoever manages this [service] gets more political power," says IDC's Bruder.

However, the government's opinion is that since Correios is responsible for the delivery of physical letters and parcels, it should also be accountable for email - which, in their view, is just another type of correpondence.

Is the creation of a locally-hosted  email system the best way to protect data? Will other countries follow suit? Let us know your views in the comments below.

Topics: Security, Government

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.


Log in or register to join the discussion
  • In terms

    It is easy to envision some foreign government agency or company bribing or blackmailing key personnel at the datacenters to install very discreet hardware sniffers, even though modern server distribution technology minimizes that risk by making it impossible to predict in which server any given piece of data will be stored - and ideally, they could have multiple datacenters working in tandem.

    That's the approach Google itself uses, and in this respect, Brazil's huge size helps - one of the messages in your e-mailbox could be in Manaus, the other in Porto Alegre, making it difficult to bug them all. In practice, however, it's likely that there will be just one datacenter, either in Brasília or in the Southeast, at least in the beginning, for I doubt this will be so much of a political priority to allocate enough funds for a distributed datacenter approach. There is also encryption technology that makes it impossible even for Correios to read the contents, especially when coupled with digital IDs (in fact, it could be a good selling point for them) - even though, of course, the very same temptation for eavesdropping that the US government satisfies with NSA would very likely to be present for the Brazilian government as well.

    However, even if buggings and hacks do happen, the ultimate control of the whole system remains in Brazil. So, even if it means locking the door after the thief has been there, if such a thing is discovered, at least in theory it will be easier to assign responsibilities and prevent further misuse. So, yes, it is a step forward, and I would be interested in using that, especially if it were coupled with good and secure mobile apps for access to the account.
  • Obama can have my password

    nothing works in Brazil
    we have no education
    not have health
    politicians make the party here
    and the population does nothing
    I hope one day I can leave this country
    just those who live here know and feel what happens
    I'm sorry for my english
    after all
    we have no education