Self-destructing emails, like email read receipts and mail services which tell you they can tell you which recipients have read your message and which have not, are at best misleading and at worse a con perpetrated on ignorant managers, executives and users who don't understand how email works.
In general, all of these schemes rely on the recipient buying into the whole process and not doing anything to subvert it. Self-destructing email either uses client extensions, where both the sender and recipient use the extension, or they rely on a 3rd party server which acts as a type of relay.
In the extension scenario, the message has additional meta-data which tells the recipient's extension to delete the message after a certain period or after it has been opened once. It will normally be necessary for the recipient to agree to allow the extension to do this. The recipient can always remove the extension or turn off this functionality, in which case the message will not be deleted unless the user explicitly tells their client to do so.
With the server scenario, the 3rd party relay will normally send a new message to the recipient which requires some sort of interaction with the 3rd party server for the recipient's client to render the contents. It could be as simple as downloading an image from the server, or requiring a request to the server to get a key to decrypt and display the message, or something more complicated. The objective is to force the recipient to use the server in order to access the message. The server can then remove either the message or access to the message based on some criteria specified by the sender.
However, the underlying problem with all of this is that if you can read the message, you can copy the message. If you can copy the message, you don't need the original and what happens to the original is irrelevant.
The issue here is that calling something like this self-destructing or self-destroying is misleading. When people hear it, they immediately picture scenes from Mission Impossible and are given the false impression that their email will no longer exist. Unfortunately, SnapChat users found out how false this assumption is the hard way when "sensitive" photos they had sent and thought would be destroyed began to
show up on other web sites.
We are in the digital age and in the digital age, copies are as good as the originals. Once upon a time, copies meant reduced quality — the more something was copied, the less the quality. This is not true with digital data — the copy is as good as the original (and contrary to all those TV shows, you cannot improve the quality either — you might be able to enhance it, but you cannot improve it).
The basic protocol underlying email is very simple. It does not yet include advanced features like read receipts, self destruction, etc. Extensions for things like read receipts have been proposed and some "unofficial" support exists in some clients such as Outlook and Apple Mail. However, these are unofficial and generally, can be turned
off by the recipient. If someone is not using a mail client which supports the extension, nothing will happen.
Same goes for many of those schemes that claim they can tell you when your email has been read by a recipient. Most of those solutions rely on things like clear glyph images being embedded inside the message — the glyph is actually an image with a remote URL. The remote URL is coded to identify the message it was embedded in. If the server receives a request for that URL, it is a safe bet that someone has tried to read the message. However, this completely fails if the user does not use an HTML based mail client or has disabled the automatic loading of images — many people do
so for security reasons. It may also fail if the message is read off-line. It can also give false positives depending on the client. Some clients might try to improve performance by pre-fetching data, in which case the client will think the message has been read when it hasn't.
firstname.lastname@example.org) which may be less practical. This is neither something new nor suspicious.