Google Announces 'End-To-End' Encryption Extension For Chrome

[wraggster]

'On their security blog today, Google announced a new Chrome extension (http://googleonlinesecurity.blogspot.com/2014/06/making-end-to-end-encryption-easier-to.html) called "End-To-End (https://code.google.com/p/end-to-end/)" intended to make browser-based encryption of messages easier for users. The extension, which was rumored (http://venturebeat.com/2014/04/21/google-is-researching-ways-to-make-encryption-easier-to-use-in-gmail/) to be "underway" a couple months ago, is currently in an "alpha" version and is not yet available pre-packaged or in the Chrome Web Store. It utilizes a Javascript implementation of OpenPGP, meaning that your private keys are never sent to Google. However, if you'd like to use the extension on multiple machines, its keyring is saved in localStorage, which can be encrypted with a passphrase before being synced. The extension still qualifies for Google's Vulnerability Reward Program (http://www.google.com/about/appsecurity/reward-program/), and joins (https://chrome.google.com/webstore/detail/mymail-crypt-for-gmail/jcaobjhdnlpmopmjhijplpjhlplfkhba) a (https://chrome.google.com/webstore/detail/kryptokit-bitcoin-wallet/lhhipingoaiddcoalochnbjlkifbpmoj) host (https://chrome.google.com/webstore/detail/mailvelope/kajibbejlboh***gdiogboambcijhkke) of PGP-related extensions already available for Chrome.'Google also published a report showing how much email is encrypted in transit (http://www.google.com/transparencyreport/saferemail/) between Gmail addresses and those from other providers.

http://it-beta.slashdot.org/story/14/06/03/2059220/google-announces-end-to-end-encryption-extension-for-chrome