3 ms·
> If you use Gmail, all your password resets will go to your Gmail which also isn't E2EE But it sort of is since it's sent over https, no?
by hanniabu 4y ago
> If you use Gmail, all your password resets will go to your Gmail which also isn't E2EE
But it sort of is since it's sent over https, no?
- Sohcahtoa82 4y agoMerely being sent over HTTPS does not guarantee full E2EE. End-to-End Encryption means that nobody between you and the person you're communicating with can decrypt the data, not even the middle-man service facilitating the communication. In the case of Gmail, the content itself is not encrypted. Google can read the e-mail. It's likely encrypted at rest, but Google has the key.
- brazzy 4y agoNo. End-to-end encryption means: only the sender and recipient can read the content, not any intermediate party or service provider. And Google is not the sender of your password reset emails, they are a service provider, and they have full unencrypted access to the content.