Viewing a single comment thread. View all comments

The-Brit t1_j0qv9zj wrote

Reply to comment by uhoreg in Google introduces end-to-end encryption for Gmail on the web by psychothumbs

>One main practical difference is that organization admins seem to have access to the keys, and so can read everything.

A handy government back door then? If so, why bother?

62

beef-o-lipso t1_j0r0f3r wrote

Pretty sure CSE is limited to the paid Gmail for business and not the free consumer Gmail.

Businesses use key escrow so that they can recover emails sent through their system. Usually for things like recovery of data, or to comply with regatory requirements such as the US SEC requiring covered financial companies storing all communications.

Businesses doing key escrow should be storing only the keys used for encryption and not the private keys for signing emails and other things.

81

cowmonaut t1_j0r334h wrote

You are correct, CSE is a feature of Enterprise/Education versions of Gmail.

31

Pomnom t1_j0smyhr wrote

That's no difference than current situation? Assuming that google encrypt all Gmail data anyway and the key is accessible to the org administrator should they ever need to assess the emails

3

beinghumanishard1 t1_j0w0sma wrote

Dude what are you talking about? Its not a back door, it’s just access for business owner to manage their organizations emails. If you don’t have this feature no business what would use it, otherwise their employees could send emails the business cannot audit.

1