Google is rolling out client-side encryption Gmail and Calendar, which might enable customers to create assembly occasions in addition to ship and obtain emails which have been encrypted earlier than being despatched to Google servers. Consumer-side encryption shall be out there to organizations with Google Workspace Enterprise Plus, Training Normal, and Training Plus plans. All different kinds of Google Workspace accounts and private Gmail accounts won’t get client-side encryption.
Google enabled client-side encryption for Google Drive, Docs, Slides, Sheets, and Meet final 12 months, so with the most recent replace, client-side encryption is now out there throughout Workspace purposes. Workspace directors must allow client-side encryption earlier than customers can use it.
Consumer-side encryption means the info is encrypted throughout the consumer’s browser earlier than it’s transmitted or saved on Google servers. As a result of the client-side decryption keys are created by a cloud-based key administration service, organizations retain management over who has entry to their information. For instance, if there’s a authorities request for Google Workspace information, Google will be unable to supply the knowledge as a result of Google doesn’t have the decryption keys. Adversaries must goal the group’s particular key to entry the info. For some organizations, this degree of management is important to fulfill regulatory compliance necessities.
Media large Groupe Le Monde depend on client-side encryption throughout Workspace to make sure journalists’ security by defending communications, appointments, and recordsdata from potential leaks, Ganesh Chilakapati, a Google Workspace group product supervisor, and Andy Wen, director of product administration for Google Workspace Safety, wrote in a Google Workspace weblog publish.
