Gmail making email more secure with MTA-STS standard

Posted by Nicolas Lidzborski, Senior Staff Software Engineer, Google Cloud and Nicolas Kardas, Senior Product Manager, Google Cloud 

We’re excited to announce that Gmail will become the first major email provider to follow the new SMTP MTA Strict Transport Security (MTA-STS) RFC 8461 and SMTP TLS Reporting RFC 8460 internet standards. Those new email security standards are the result of three years of collaboration within IETF, with contributions from Google and other large email providers.

SMTP alone is vulnerable to man-in-the-middle attacks

Like all mail providers, Gmail uses Simple Mail Transfer Protocol (SMTP) to send and receive mail messages. SMTP alone only provides best-effort security with opportunistic encryption, and many SMTP servers do not prevent certain types of malicious attacks intercepting email traffic in transit.

SMTP is therefore vulnerable to man-in-the-middle attacks. Man-in-the-middle is an attack where communication between two servers is intercepted and possibly changed without detection. Real attacks and prevention were highlighted in our research published in November 2015. MTA-STS will help prevent these types of attacks.

MTA-STS uses encryption and authentication to reduce vulnerabilities

A MTA-STS policy for your domain means that you request external mail servers sending messages to your domain to verify the SMTP connection is authenticated with a valid public certificate and encrypted with TLS 1.2 or higher. This can be combined with TLS reporting, that means your domain can request daily reports from external mail servers with information about the success or failure of emails sent to your domain according to MTA-STS policy.

Gmail is starting MTA-STS adherence. We hope others will follow

Gmail the first major provider to follow the new standard, initially launching in Beta on April 10th 2019. This means Gmail will honor MTA-STS and TLS reporting policies configured when sending emails to domains that have defined these policies. We hope many other email providers will soon adopt these new standards that make email communications more secure.

Email domain administrators should set up DNS records and web server endpoint to configure MTA-STS and TLS reporting policies for incoming emails. Use our Help Center to find out how to set up an MTA-STS policy with your DNS server. G Suite admins can use the G Suite Updates blog to see what MTA-STS means for G Suite domains.

Beta Channel Update for Desktop

The beta channel has been updated to 74.0.3729.75 for Windows, Mac, and, Linux.

A full list of changes in this build is available in the log. Interested in switching release channels?  Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.



Srinivas Sista
Google Chrome

Get more done in less time with G Suite Add-ons beta

This announcement was made at Google Cloud Next ‘19 in San Francisco. Check out Next OnAir to tune into the livestream or watch session recordings following the event.

What’s changing

We’re announcing G Suite Add-ons, a new cross-suite platform that connects G Suite to your favorite workplace apps, in a beta program.


Last year we announced a new feature that gives users quick access to Calendar, Hangouts, and Keep from an embedded side panel in G Suite. Today we’re announcing that the side panel is now open for third-party developers.

Who’s impacted

Admins and end users

Why you’d use it

Add-ons help you complete tasks directly from the G Suite app you're using, rather than needing to toggle from one app to another.

G Suite Add-ons also surface relevant information and suggest actions based on what you’re working on. For example, a salesperson can find customer info from their CRM tool while drafting a strategy in Docs, an engineer can add tasks to their project management app directly from Gmail, and a recruiter can consult their hiring pipeline while scheduling interviews in Calendar. Once enrolled in the beta, users in the domain will have access to new add-ons from Copper, Box, Workfront, Asana, Evernote, and Cisco, among others.

How to get started


  • Admins: Express interest in the G Suite Add-ons beta. Once your organization joins the beta program, you can also install chosen G Suite Add-ons for your entire domain via the G Suite Marketplace.
  • End users: Once your organization is in the beta program, you’ll be able to install G Suite Add-ons from the “+” button in the G Suite quick access side panel.The G Suite Add-ons you install will appear in the side panel across G Suite apps and help you complete entire workflows without the need to switch back and forth between multiple apps.

Helpful links



Availability

G Suite editions

  • All G Suite editions are welcome to apply to this program.

Stay up to date with G Suite launches

Updates to YouTube TV: More content and a new price

Two years ago, we launched YouTube TV to bring the best of live TV, delivered the way you want. Since then, we’ve been working to build a package that fits your needs. We expanded nationwide, added 10+ new channels, improved our DVR and launched new features to take your viewing experience to the next level.

As we continue to listen to you and build a best-in-class content and product experience, we have a few updates to share today.

We’ve been listening when you asked for the Discovery network brands. Today, we are excited to announce that we're bringing eight of your favorite channels to YouTube TV: Discovery Channel, HGTV, Food Network, TLC, Investigation Discovery, Animal Planet, Travel Channel, and MotorTrend. We’ll also be adding OWN: Oprah Winfrey Network later this year. In addition, EPIX is now available for an additional charge.

This means that you’ll be able to follow along on the adventures of Sig Hansen and Captain Keith Colburn on "Deadliest Catch," watch as Drew and Jonathan Scott create dream homes on "Property Brothers," and celebrate as Randy Fenoli and the Kleinfeld crew help brides in "Say Yes to the Dress." Add EPIX to watch Max Easton and his team at MI6 as they look to save the world on "Deep State," or catch up on the earlier exploits of another British agent in "Moonraker."

In keeping with our goal of giving you the content you want—when you want it—YouTube TV now includes 70+ networks, 6 accounts per household (each with its own unique recommendations and cloud DVR with no storage space limits), and 3 concurrent streams. It's all included in the base cost of YouTube TV. We also provide complete local affiliate coverage, with local feeds from all of the four largest broadcasters in over 90% of the markets where YouTube TV is available, and three of four stations in all the rest. And you can watch YouTube TV on any screen—mobile devices, tablets, computers and TVs. We will continue to expand the list of supported devices.

To keep bringing you the best service possible, we’re updating our membership price to $49.99/month. The price for members billed through Apple will be $54.99/month. This new price takes effect today, April 10, for new members. Existing subscribers will see these changes reflected in their subsequent billing cycle after May 13.

Posted by Christian Oestlien, Vice President of Product Management, YouTube TV

Source: YouTube Blog


Increase trust in cloud data security with Access Transparency

This announcement was made at Google Cloud Next ‘19 in San Francisco. Check out Next OnAir to tune into the livestream or watch session recordings following the event.

What’s changing 

We’re making Access Transparency for G Suite generally available. Access Transparency enables you to get more visibility into actions taken by Google staff related to your data. You can view the reason for each access, including references to specific support tickets where relevant, which may help you support your audit requirements.

Access Transparency is available to G Suite Enterprise and G Suite Enterprise for Education customers only.

Who’s impacted 

Admins only

Why you’d use it 

At G Suite, we work hard to earn and maintain trust with our customers. Access Transparency supports this commitment to customer trust by giving you fine grained logs of actions taken by Google staff and the reason for each access, including references to specific support tickets where relevant.

Access Transparency may help you:
  • Verify why Google is accessing your data, such as fixing a fault or attending to your requests. 
  • Bring your audit controls closer to what you can expect on premise. 


How to get started 




A Sample view of the new report for G Suite Access Transparency 

Additional details 

Access Transparency will allow admins to:

  • View the reason for data access, including references to specific support tickets where relevant. 
  • Verify why Google staff is accessing your data, such as fixing a fault or attending to your requests. 
  • View and download logs to help you support your regulatory audits or data archival needs, showing extensive information such as accessor location, access justification, and the action taken on a specific resource. 


Helpful links 




Availability 

Rollout details 

  • Rapid Release domains: Extended rollout (longer than 15 days for feature availability) starting on April 20, 2019. 
  • Scheduled Release domains: Extended rollout (longer than 15 days for feature availability) starting on April 20, 2019. 


G Suite editions 

  • Available to G Suite Enterprise and G Suite Enterprise for Education edition only. 
  • Not available to G Suite Basic, G Suite Business, G Suite for Education, and G Suite for Nonprofits 


On/off by default?

  • This feature will be ON by default.


Stay up to date with G Suite launches

Live captions in Hangouts Meet

This announcement was made at Google Cloud Next ‘19 in San Francisco. Check out Next OnAir to tune into the livestream or watch session recordings following the event.


What’s changing

We’re making meetings more accessible for deaf and hard-of-hearing users by launching live captions in Hangouts Meet.

Who’s impacted

End users

Why you’d use it

Live captions help make your meetings more accessible by reducing barriers to holding meetings between users of different hearing abilities, regardless of whether they are participating remotely or in person.

How to get started


  • Admins: No action required.
  • End users:
    • On the web and on Chromebase for meetings touchscreen devices, navigate to the triple-dot menu at the bottom right corner of your screen and select the option to turn on captions.
    • On devices with a Mimo touchscreen and Chromebox for meetings with the remote, you can find the toggle to turn on captions in the Settings menu.

Additional details

Live captions is available across different Hangouts Meet-compatible platforms, such as on the web, devices with a Mimo touchscreen, Chromebox for meetings with the remote, and on Chromebase for meetings touchscreen devices.

When you turn on captions, they will be visible on that particular device. In order for other participants in the meeting to see captions, they’ll have to turn it on for their devices as well.

Currently, live captions is only available in English. Additionally, captions will not appear in a recording of a meeting.

Helpful links



Availability

Rollout details

  • Rapid Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on April 10, 2019
  • Scheduled Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on April 10, 2019

G Suite editions
Available to all G Suite editions

On/off by default?
This feature will be ON by default.

Stay up to date with G Suite launches

Google Voice for G Suite: Cloud telephony with the intelligence and security of Google Cloud

This announcement was made at Google Cloud Next ‘19 in San Francisco. Check out Next OnAir to tune into the livestream or watch session recordings following the event.

What’s changing 

Google Voice is now generally available as an add-on to G Suite. Voice for G Suite is a cloud-based phone system that’s optimized for businesses of all sizes. G Suite customers can use it to deploy and manage phone numbers at scale with the intelligence and security of Google Cloud. Google Voice offers:

  • Smart cloud telephony for end users 
  • Simple provisioning and management for admins 
  • Easy adoption and migration at scale 


Google Voice is available to all G Suite customers through an additional licence. Find more information about Google Voice availability and pricing here.

Who’s impacted 

Admins only

Why you’d use it 

Google Voice integrates with Hangouts Chat and Hangouts Meet to provide a complete solution for communication with colleagues, customers, and partners from anywhere at any time. Specifically, Google Voice adds:

Smart cloud telephony for end users 

  • Get a phone number that works from anywhere, on any device, so you can place and receive calls wherever you’re doing work. 
  • Use intelligent capabilities to transcribe voicemails and block spam calls to help minimize unwanted distractions. 
  • Increase efficiency through integrations with other G Suite products, like Calendar, Contacts, Hangouts Chat, and Hangouts Meet. 

Simple management for admins 

  • Use one place - the Admin console - to manage Voice global users, numbers, porting, and billing. 
  • Set up new phone numbers as easily as adding a user to G Suite. 
  • Easily provision and deploy via simple administration tools 

Scalable adoption and migration 

  • Migrate smoothly with integrated number porting to help prevent interruption of key business processes. 
  • Leverage Google’s text-to-speech technology to automatically create call menus in nine languages to manage and route callers without worrying about recordings or translations. 
  • Give users permission to choose a number and set up their service independently without admin involvement. 

How to get started 



Availability 

Google Voice is available to all G Suite customers through an additional licence. Find more information about Google Voice availability and pricing here.



Stay up to date with G Suite launches

Apply to be a part of the Hangouts Chat Accelerated Transition Program

This announcement was made at Google Cloud Next ‘19 in San Francisco. Check out Next OnAir to tune into the livestream or watch session recordings following the event.


What’s changing

We’re announcing an Accelerated Transition Program to give a first wave of organizations a head start on migrating to Hangouts Chat and get early access to new features.

Additionally, we've heard your feedback, and we want to give you early access and more time before the general availability of these features. Therefore, we’re extending the previously announced timelines to give you more time to manage change in your organization. See below for more information.

Who’s impacted

Admins only

Why you should apply to the Accelerated Transition Program

Simplify communications by disabling classic Hangouts apps and migrating all users to the newest enterprise-grade Chat product on a faster timeline. As a part of this program, you’ll receive early access to new Chat features such as Chat integration with Gmail and the ability to chat with external users.

For more information about the additional benefits of this program, check out the Acceleration Transition Program Help Center.

How to get started



Upcoming changes to the Chat and Vault transition schedule

Some changes originally scheduled to happen starting on April 16, 2019, such as Chat retention rules and holds applying to your messages in Hangouts Classic, and enabling Chat for all users that are using classic Hangouts, will now take place over the next few months. We'll also be giving you more time before we transition all domains from classic Hangouts to Chat. More notices and details will be shared on the G Suite Updates blog as they approach.

Note: If you are a Google Vault customer, you still must set Chat retention rules and holds before April 16, 2019. You must continue to create new holds in both Mail and Hangouts Chat if you need to preserve chat messages during this migration period.


Helpful links



Availability

G Suite editions

  • All G Suite editions are welcome to apply to this program.

Stay up to date with G Suite launches

Introducing Currents, the newest G Suite app

This announcement was made at Google Cloud Next ‘19 in San Francisco. Check out Next OnAir to tune into the livestream or watch session recordings following the event.

What’s changing 

Launching first to beta, Currents is a G Suite app that enables people to have meaningful discussions and interactions across your organization, helping keep everyone in the know and giving leaders the opportunity to connect with their employees.

Currents is replacing Google+ for G Suite, and has a new look, feel, and set of features. All of your organization’s existing Google+ content will automatically transfer to Currents once you are enrolled in the beta.


Who’s impacted 

Admins and end users.

Why you’d use it 

Exchange ideas at scale: 
Currents makes it easy to have meaningful discussions by enabling leaders and employees to exchange ideas across the organization and gather valuable feedback and input from others — without flooding inboxes.

  • Currents features a streamlined experience for composing content — users can easily tag their posts and attach relevant attachments or images. 
    • Once a user posts, others can comment, give feedback, and ask questions all in the same place. 
    • Individual users can also track analytics for their posts. 
Currents also gives leaders a way to engage with their employees more directly, allowing them to take the pulse of their organization and understand what’s important.

  • Posts from leadership can be given priority in the home stream, improving visibility across the organization to drive alignment. 


Connect people to content: 
Currents connects employees to useful and timely content that is personalized to their role and interests. Giving employees access to relevant content keeps them connected to the organization and creates more learning opportunities:

  • Content remains on Currents over time, so users can revisit and engage at a later date. 
  • Tags and streams make it easy to find and discover content of interest. 
  • Content in the home stream is ordered by relevance so it’s prioritized for what is most important to that individual, or users can choose to sort it chronologically. 

Manage and curate with ease: 
Admins can shape the discussion in the organization by creating custom streams to promote specific content to a targeted set of employees or the entire company. Additionally, admins can measure engagement across the platform with metrics to track usage and understand what content is resonating across the organization.

  • Admins can delegate content management responsibilities to a new role called Content Administrator. 
  •  These Content Admins can easily create custom streams, manage tags, define leaders, moderate content, and track usage and engagement with metrics. 

How to get started 

  • Admins: To request access to the beta program for your organization, please email CurrentsBeta@google.com. 
  • End users: No action required. 

Helpful links 

To request access to the beta program for your organization, please email CurrentsBeta@google.com.   
To learn more about the sunsetting of Google+ for consumers.
To learn more about new enterprise-grade features for Google+.

Availability 

G Suite editions 
  • Available to all G Suite editions.

Stay up to date with G Suite launches

Work with billions of rows of BigQuery data with connected sheets, launching in beta

This announcement was made at Google Cloud Next ‘19 in San Francisco. Check out Next OnAir to tune into the livestream or watch session recordings following the event.

What’s changing 

We’re introducing connected sheets in beta (coming soon). This new type of spreadsheet activates when using the Sheets data connector and will allow users to access, analyze, visualize, and collaborate on up to 10 billion rows of BigQuery data without the need for SQL scripts.

With connected sheets, it’s easier for users to surface insights in Sheets and make sense of that data using tools and features already familiar to them — like formulas, Explore, pivot tables, and charts. 

Admins can learn more about the beta here.


Who’s impacted 

Admins

Why you’d use it 

Connected sheets makes it easier to do the following:

  • Access and refresh large volumes of connected data without CSVs or SQL scripts 
  • Streamline reporting workflows and easily build data driven reports 
  • Simplify collaboration with other analysts and stakeholders. 

How to get started 



  • Admins: To learn more and apply to the connected sheets beta, see here. 
  • End users: No action required. 

Additional details 


Users can refresh their data which in turn will refresh any associated data within a chart, pivot table, function or table.

Data can also be set to refresh automatically, making it even easier to stay up to date on the latest and greatest data.

Helpful links 

To learn more about connected sheets, see here. 
To apply for the connected sheets beta, see here. 

Availability 

G Suite editions 

  • Available to G Suite Business, G Suite Enterprise, G Suite for Education, G Suite Enterprise for Education, and G Suite for Nonprofits 
  • Not available to G Suite Basic.


Stay up to date with G Suite launches