Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Client-side encryption for Gmail in Google Workspace is now generally available

workspaceupdates.googleblog.com

Post reply on HN
Print view View original

1–10 of 101 posts

Re: Client-side encryption for Gmail in Google Workspace is now generally available

#3

Post by acatton »

This is purely marketing AFAIT. I don't see how it provides any protection against the 5 eyes or having one's google account breached. The encryption/decription is done with javascript code served to your browser by google (= can be hijacked/changed/…)

The only way to do client side encryption is PGP on a native client distributed by a third party.

Re: Client-side encryption for Gmail in Google Workspace is now generally available

#5

Post by Gasp0de »

acatton wrote: post #3

This is purely marketing AFAIT. I don't see how it provides any protection against the 5 eyes or having one's google account breached. The encryption/decription is done with javascript code served to your browser by google (= can be hijacked/changed/…) The only way to do client side encryption is PGP on a native client distributed by a third party.

If the key is encrypted with your password, I don't see how that compromises security by a lot. If they adapt the javascript to break encryption on a large scale, that would sooner or later come out.

Yes, they could target specific people, deliver different javascript and break their encryption, but in general it's still a huge security gain. It makes it impossible for Google to handover E-Mails retrospectively to police or spy agencies.

Re: Client-side encryption for Gmail in Google Workspace is now generally available

#8

Post by kenniskrag »

acatton wrote: post #3

This is purely marketing AFAIT. I don't see how it provides any protection against the 5 eyes or having one's google account breached. The encryption/decription is done with javascript code served to your browser by google (= can be hijacked/changed/…) The only way to do client side encryption is PGP on a native client distributed by a third party.

It is encrypted by the key service and not by google: https://support.google.com/a/answer/10801691

can be self hosted.

Re: Client-side encryption for Gmail in Google Workspace is now generally available

#9

Post by cientifico »

That is not Generally available:

  Availability 
  * Available to Google Workspace Enterprise Plus, Education Plus, and Education Standard customers 
  
  * Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Education Fundamentals, Frontline, and Nonprofits, as well as legacy G Suite Basic and Business customers 
  
  * Not available to users with personal Google Accounts

Re: Client-side encryption for Gmail in Google Workspace is now generally available

#10

Post by xinu2020 »

>Availability > >Available to Google Workspace Enterprise Plus, Education Plus, and Education Standard customers >Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Education Fundamentals, Frontline, and Nonprofits, as well as legacy G Suite Basic and Business customers >Not available to users with personal Google Accounts

Also to be available it must first be enabled by a workspace admin, then by the end user.

Post reply on HN