8 ms·
> likely even while they’re stored on their servers. I'm all for castigating Google for not encrypting the TOTP seed which is (apparently) transmitted in the c
by zamnos 3y ago
> likely even while they’re stored on their servers.
I'm all for castigating Google for not encrypting the TOTP seed which is (apparently) transmitted in the clear, but there's no actual proof (one way or the other) that the secrets are/are not being stored encrypted. Thus claiming "even while stored" claim is a bit much.
- kevincox 3y agoYeah, there isn't such thing as an unencrypted disk at Google. Most things are encrypted multiple times in different layers before hitting physical media. Not E2EE which is a serious concern, but definitely encrypted in some form in transit (exceptions for intra-datacenter transfers) and at rest.