Gmail launches end-to-end email encryption on Android / iOS clients, claiming that "even Google can't read it."

Thanks to CTOnews.com netizen Alejandro86 for the clue delivery! CTOnews.com, September 30, after providing end-to-end encryption for web pages at the beginning of the year, Google Gmail email now provides the same end-to-end encryption for Android and iOS App, and mobile users will be able to read and write encrypted emails directly from their smartphones.

The general idea of the blog post attached to CTOnews.com is as follows:

Although Google Workspace uses a secure design encryption library to encrypt data at rest and in transit, client-side encryption ensures that you have full control over encryption keys and data access.

Client-side encryption ensures that sensitive data in your email body and attachments cannot be decrypted by Google servers, and you retain control over encryption keys and identity services that access those keys.

Google said the feature allows users to use mobile devices anywhere to process the "most sensitive" data while complying with compliance and regulatory requirements. The feature encrypts and digitally signs e-mails using the S / MIME protocol before sending them to Google servers.

According to reports, this function needs to be subscribed to Google Workspace and configured by the administrator. Non-enterprise or educational subscribers do not support this feature. The applicable versions are as follows:

Google Workspace for Enterprise Plus

Education Plus

Education Standard

The inapplicable versions are as follows:

Essentials

Business Starter

Business Standard Plus

Google personal account

This feature is disabled by default, eligible users can turn on end-to-end encryption by clicking the blue lock icon in the Gmail "theme" column, and the administrator must enable access through the CSE management interface.