2 ms·
I think they are referring to the scenario where cloud backup is enabled.
by cogitoergofutuo 3y ago
I think they are referring to the scenario where cloud backup is enabled.
- gojomo 3y agoAha, thanks. But, if the 2FA secrets were end-encrypted as the top link suggests, Google then wouldn't in fact have them - so the ggp-comment accusation that the link "overlooks" this factor is nonsensical. (And if Google were denied access to the cleartext 2FA secrete this, way, then briefly compromising someone's Google account – say by hacking or abuse of legal process – wouldn't automatically compromise all other 2FA-key-protected accounts.)