Google is extending this “next-level” encryption to more Gmail users

[ad_1]

Image: FG Trade/Getty Images

Google is extending its client-side encryption implementation to Gmail and Calendar, allowing more users to send and receive encrypted email and calendar invitations.

Client Side Encryption (CSE) functionality is now generally available to Google Workspace Enterprise Plus, Education Plus, and Education Standard customers following the December beta launch.

Plus: Google brings client-side encryption to Gmail for Workspace

CSE is similar to end-to-end encryption (E2EE), but differs in that encryption keys are generated and stored in a cloud-based key management service that can be managed by administrators, who must select a management service of non-Google keys.

While it has reached general availability for some Workspace accounts, Gmail users with a personal account are not offered the feature. It’s also not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Education Fundamentals, Frontline, and Nonprofits, as well as legacy G Suite Basic and Business customers.

CSE is available now for Drive, Docs, Slides, Sheets and Meet. The feature for Gmail and Calendar is turned off by default, so admins need to enable it in the Workspace admin console before users can send encrypted emails and invitations, according to Google. If it’s enabled, Gmail users can click the lock icon and select additional encryption to send an encrypted message before it reaches Google’s servers.

“Client-side encryption takes existing encryption capabilities to the next level by ensuring customers have sole control over their encryption keys and therefore complete control over access to their data,” Google explains.

Google is positioning the feature as a compliance-related effort to give organizations in regulated industries greater confidence that third parties, including Google, cannot access sensitive data. Clients using CSE include PwC UK, Verizon, Airbus and Groupe Le Monde.

“Because customers maintain control over encryption keys and the identity management service to access those keys, sensitive data is indecipherable to Google and other external entities,” Google Workspace representatives Ganesh Chilakapati explain in a blog post. and Andy Wen.

Plus: Remote work is everywhere now. Here’s how to make it work

Third-party key management services that work with Gmail CSE include FlowCrypt, Fortanix, FutureX, Stormshield, Thales, and Virtru.

Image: Google

[ad_2]