Suggestion for increased security in Google Docs & Spreadsheets
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEis3jYRU8_xDKKh767_R2MQWN_K4dWm38TsEUYExmds0wxyF3HUtH13hjQ4QfAVl8DAln3tzhv6oZL6eTATFQ4X_4_yfzjjVVuDBYLyQlcUvGVyzyNccmB-6wUh1aW7DPm3epLhNQ/s400/google_docs_suggestion_sm.gif)
However, as I started to add more personal documents I also became increasingly concerned about the potential for loss or abuse of my data. I am not so much worried about some Google employee being able to view my data stored on their servers. I know Google is very keen on protecting the data and privacy of its users, although I agree with John Battelle that we shouldn't become complacent and ignore the dangers of all our data being so vulnerable, within reach of one ill-intentioned but well-connected individual.
I am not so worried either about the lack of SSL encryption in Google Docs & Spreadsheets, which means that my data is being transmitted unencrypted from my computer to Google's server, available to be snatched by anybody watching Internet packets go by on my wireless network. I am worried about it of course, but it is possible to force Google Docs & Spreadsheets to work in SSL by using a Firefox extension such as CustomizeGoogle. (* see update below)
What I became concerned about was the potential for somebody from my inner circle of acquaintances (colleagues, friends, passing visitors, etc...) to be granted access to my personal documents without my knowledge or desire. It is well-known that identity theft crimes are often committed by a person in the inner circle of the victim, and by the same token I think this is how my data is the most vulnerable.
Google Docs & Spreadsheets is restricting access to your documents through your Google account and password, which are certainly secure in terms of their encryption ; however I find that many people are now logged almost constantly in their Google account, be it through the Google personalized homepage, Gmail, or any other Google service. This is good for Google of course, who benefits from the knowledge of your surfing habits, however it can open a breach in your own security. The "secure" protection that you thought your Google password provided is not going to be much of a barrier. For this reason, I posted a message on the Google Group for Google Docs & Spreadsheets, with a suggestion to improve the security for those few sensitive documents that you may have stored. The idea is inspired by the method that Google themselves (itself?) put in place to restrict access to your Search History: add a new layer of security, even though you are already logged into your Google account. Here is how Google explains it:
To help protect your privacy, we'll sometimes ask you to verify your password even though you're already signed in. This may happen more frequently for services like Personalized Search which involves your personal information.My suggestion for Google Docs & Spreadsheet is very similar. Here is how the main page currently looks like:
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIP7K8hVXCg1i53Gr8jU7wgueZNmEzRXOYaWvaDuWaqMyuiqA-YGQ7NUWKjiT-7twY2PddxCL2tB5MlGIJUcISFv8uEx3IPV6FFbLzfbvj8VYEkTtHV1aWlctNqPSIWwrQzetpgw/s400/google_docs_current.gif)
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6JDigti4MHLAaKyBOvdMMGZ1dKCdGTk0wChLqf-wQos2o1O8jBXfuy6ptJml3Tw3TONx58VEbeJg_N3SX4wIOtVRCk7qZJC8Vi2CAfOPnjbWD3Lf4o8kzp4bR2G8S7p-FqxUdKg/s400/google_docs_suggestion.gif)
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQp8vOpPN8gj6_E2tQczxIsZybCOIkLXR5Rs4UsMlh2Ps0S-y7cak2STa9cwbptAGYDFicovKb61qLWsbBsIaAMjcc_xt0V2GSPCZcE6o5hY7tbS9-TrsLH25oXjr7GVr8EyXgnA/s400/google_docs_lock_pwd.gif)
Update (2007-07-26): Google upgraded their Docs & Spreadsheets about a month ago, and since around that time they also implemented SSL support for spreadsheets as well. This is a welcome improvement, unfortunately it does not address the other security and privacy issues mentioned above.
Labels: data protection, google, Google Docs and Spreadsheets, privacy, security
<< Home