Embed Notice

Can anyone with deep knowledge of end-to-end encryption help me unpack Google's new E2EE offering for Workspace users?

First of all, how is it true E2EE if it's using Google's Client Side Encryption?

Second, how does it work? Sounds like organization stores keys in a cloud service, and when an employee in said organization wants to send an encrypted email, their browser downloads a public key from the cloud service, encrypts the message, and then it's sent to the recipient. Am I right so far?

It's not clear to me how the message gets decrypted on the other side. Is it decrypted on Google's server, in the recipient's browser or email client, something else?

All in all, how useful will this be to organizations? And might there be a way for individuals to use it someday?

TIA.

https://workspace.google.com/blog/identity-and-security/gmail-easy-end-to-end-encryption-all-businesses