Is any method encrypted?
Google uses encryption over the air, between your server and its (SSL), and between their server and device. Therefore, the only systems that have access to GCM message data are:
- your server
- your subscriber device
- Google
should I encrypt my messages?
It depends on whether you trust Google or what the nature of your message is. For example, if the message payload cannot be used directly by Google (for example, it's just a flag telling your application to sync using the normal web service protocol), then encryption may not be required.
CommonsWare
source share