Can't find anything about key rotation. How do they crack that nut?
Client-side encryption for Gmail in Google Workspace is now generally available
41–50 of 101 posts
Re: Client-side encryption for Gmail in Google Workspace is now generally available
#42>Availability > >Available to Google Workspace Enterprise Plus, Education Plus, and Education Standard customers >Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Education Fundamentals, Frontline, and Nonprofits, as well as legacy G Suite Basic and Business customers >Not available to users with personal Google Accounts Also to be available it m…
> Also to be available it must first be enabled by a workspace admin, then by the end user.
Just out of curiosity, why would you expect anything different?
Re: Client-side encryption for Gmail in Google Workspace is now generally available
#43Good for gmail. These days, people really should get their own domain and host there email there. If you do not know how to do this, there are plenty of cheap hosting companies you can use. And if you want to encrypt, use gnupg or that thing Thunderbird now uses. I am a mutt user and gnupg with mutt is rather easy.
You must use your own domain with Google Workspace, which is what the post is about.
Re: Client-side encryption for Gmail in Google Workspace is now generally available
#44Went into this thread thinking "how will HN find an angle where this is a bad thing?". Was not disappointed.
Re: Client-side encryption for Gmail in Google Workspace is now generally available
#45[deleted]
Re: Client-side encryption for Gmail in Google Workspace is now generally available
#46Good for gmail. These days, people really should get their own domain and host there email there. If you do not know how to do this, there are plenty of cheap hosting companies you can use. And if you want to encrypt, use gnupg or that thing Thunderbird now uses. I am a mutt user and gnupg with mutt is rather easy.
Sure, if that's your hobby. I used to do that, but there are other things you can do with our time too. So now I use ProtonMail with my own domain.
Re: Client-side encryption for Gmail in Google Workspace is now generally available
#47Can't find anything about key rotation. How do they crack that nut?
My understanding is that you create a new key in the external key management service, re-encrypt all applicable data in Workspace with the new key and then revoke/delete the old key. All this is API-based, of course, so it can be automated.
(Testing Cunningham's Law here)
Re: Client-side encryption for Gmail in Google Workspace is now generally available
#48Earlier quoted context omitted.
That's weasel word marketing. They know the majority of their users are going to think 'generally available' is exactly what it sounds like, not their made up meaning. https://en.wikipedia.org/wiki/Weasel_word
If a restaurant near you says their new menu is generally available, do you turn up looking for a free meal without a reservation? The Google announcement is pretty direct about the plans the feature is included with, and how to enable it.
While the education plans aren't publicly available, apparently there is no minimum for Enterprise Plus accounts. Theoretically, an enterprising (unless nonplussed) individual could indeed get this feature at I think $30/mo.
Re: Client-side encryption for Gmail in Google Workspace is now generally available
#49Earlier quoted context omitted.
What if you want email you send to make it to the inbox of gmail, 365 users?
Most hosted mail services have no issues getting to mailbox. I've used Gandi, Mailbox, FastMail, and never have any mails flagged as spam. Deliverability is only an issue when self hosting (particularly for home IPs)
>never have any mails flagged as spam
You don't know this for certain, no one can unless you monitor both ends.
Re: Client-side encryption for Gmail in Google Workspace is now generally available
#50>Availability > >Available to Google Workspace Enterprise Plus, Education Plus, and Education Standard customers >Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Education Fundamentals, Frontline, and Nonprofits, as well as legacy G Suite Basic and Business customers >Not available to users with personal Google Accounts Also to be available it m…
To me this feature looks like a box ticking exercise with an eye toward government contracts. Microsoft has it so Google needs it too in order to avoid looking less secure to decision makers who may not know whether or not it will ever be needed.
Sure, it ticks this exact box that the help article mentions:
> Your organization operates in a highly regulated industry, like aerospace and defense, financial services, or government.