3 ms·
Why does Google need long-term forward secrecy? They may encrypt my sessions with keys, but most of their data is the huge index of the public web which is, by
by xhkkffbf 3y ago
Why does Google need long-term forward secrecy? They may encrypt my sessions with keys, but most of their data is the huge index of the public web which is, by definition, public. I suppose they dabble in things like health records, but it seems like most of what they store and forward are public.
- Tarq0n 3y agoGoogle operates among other things an office suite, a cloud platform, the largest repository of location services data in the world and an IoT health/lifestyle devices company.
- xhkkffbf 3y agoAnd do they encrypt any of those details aside from while the data is in transit? My impression is that they don't.
- ogurechny 3y agoAny big company has numerous data access restrictions. Some of them are obligatory and external, or required for certification. Even basic HDD/SSD decommission and transfer between projects strongly implies that old data was not stored as clear text.
- remus 3y agoIm pretty sure they encrypt anything remotely sensitive at rest. A quick google found sources for this for cloud [1] and drive [2]. [1] https://cloud.google.com/docs/security/encryption/default-encryption https://cloud.google.com/docs/security/encryption/default-en... [2] https://support.google.com/drive/answer/10375054?hl=en-GB https://support.google.com/drive/answer/10375054?hl=en-GB