> For the complete documentation index, see [llms.txt](https://oten.gitbook.io/kms-support/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oten.gitbook.io/kms-support/user-guide/publish-your-docs/google-meet.md).

# Google Meet

### I. Connection Flow: Organizing or Joining a Secured Meeting

When a host starts or a participant joins an encrypted Google Meet session, the following "Wrap" process occurs:

1. **Session Key Generation:** Google generates a unique Session Encryption Key (acting as the DEK) for the meeting's media streams (audio and video).
2. **Key Protection Request:** Before the meeting starts, Google sends this session key to Oten KMS to be secured.
3. **Key Wrapping:** Oten KMS verifies the organizer's credentials and wraps (encrypts) the session key using the designated Customer Managed Key (CMK).
4. **Key Distribution**: The wrapped session key is distributed to authorized participants. Google servers facilitate the delivery but cannot decrypt the key.
5. **Secure Handshake:** Each participant's client sends the wrapped key back to Oten KMS (via the KACLS) to unwrap it using their own identity.
6. **End-to-End Encryption:** Once unwrapped, the session key stays in the browser's volatile memory to encrypt outgoing media and decrypt incoming media from other participants.

{% embed url="<https://app.supademo.com/demo/cmnr5l7uy0vwocr4jzx3wwv01?utm_source=link>" %}

### II. Maximize feature potential

* To optimize the use of this features across browsers and mobile apps, please configure your settings as follows:
  * For **mobile app:**&#x20;
    * Update the related apps to the **latest version for the best experience** (example: Gmail is 6.0.260406).
    * Chrome is the recommended default browser.
    * **Android:** If it does not work properly in the app, **clear the cache** and try again.
  * For **desktop app browser: Chrome** (or Chromium core browser) is the recommended default browser.
* These features **work reliably in web browsers**. On the mobile app, availability depends on the app version and Google's support, so usage may vary by version and is not always consistent.

### III. Supported services, applications, and data types when using Google CSE

<table data-full-width="true"><thead><tr><th width="186.61328125">Service</th><th>Apps</th><th>Data that's client-side encrypted</th><th>Data that's not client-side encrypted</th></tr></thead><tbody><tr><td><strong>Google Meet</strong></td><td><ul><li>Web browser</li><li>Drive for Desktop</li><li>Android mobile app</li><li>iOS mobile app</li></ul><p><strong>Note:</strong></p><ul><li>Meeting room hardware will be available in a later release.</li><li><strong>For mobile app:</strong> Chrome is the recommended default browser.</li></ul></td><td><ul><li>Audio streams</li><li>Video streams (including screen sharing)</li><li>Chat messages</li></ul></td><td>Any data other than audio and video streams and chat messages</td></tr></tbody></table>