Re:Clarifications regarding arrest of climate activist
by tgsovlerkhgsel on Tuesday September 07, 2021 @02:07PM
(#28447863)
For Google (and almost every provider that isn't very specifically targeting the highest levels of security at the expense of usability), the answer to the rhetorical question I posed is "yes", which implies that they can read your mail, without having to target you or anything you have.
While (as you correctly pointed out) the fact that you lose access to the data if you lose your passphrase doesn't prove that the data is completely inaccessible without it, the opposite (being able to access the data even if you forget/lose all your secrets/keys) conclusively proves that such access is possible.
What I have no idea about is Google. Do they even need to do anything targeting you in order to decrypt the data or not? Obviously they can modify your software with a remote update such that they can capture your decryption password, but that's a lot more work than querying a database and using a master key that Google has on hand for this sort of thing.