Android GCM encryption

Question

I'm starting my way with Android GCM Framework..

It's actually pretty nice and easy to implement but one important question:

The data i'm transferring is not sensitive, but yet i don't want it be available from everyone..

Is this encrypted some how ? or should i encrypt my messages ?

I know that in basic its a notification service - but i'm sending short messages so its important to me to understand how these messages are passing by Google,

Thanks !

Answer 1

Is this encrypted some how ?

Google uses encryption over the air, between your server and theirs (SSL) and between their server and the device. Hence, the only systems that have access to the GCM message data are:

• your server
• your subscriber's device
• Google

should i encrypt my messages ?

That would depend upon whether or not you trust Google, and what the nature of your message payload is. For example, if the message payload cannot be directly used by Google (e.g., it is simply a flag telling your app to sync using your normal Web service protocol), then encryption is perhaps not necessary.