5 ms·
The fact that Google can offer fulltext search of documents implies they cannot be encrypted, because Google can read them.
by gcr 10y ago
The fact that Google can offer fulltext search of documents implies they cannot be encrypted, because Google can read them.
- skybrian 10y agoThat depends on what you mean by encryption. The data can still be stored in encrypted files where Google has the key(s). https://cloud.google.com/security/encryption-at-rest/#encryption_of_data_at_rest https://cloud.google.com/security/encryption-at-rest/#encryp...
- gcr 10y agoBy some definition, accessing gmail over TLS counts as "in-flight encryption" too. Encrypting when the organization has the keys is only effective when accessing the ciphertext is easier than accessing the key material. I'd prefer a solution where Google could only store encrypted blobs with no access to my keys and all decryption happens on the client device.