Advanced

Encrypt Early, Encrypt Often!

Posted by tracyanne on · 2 comments
Dr. Dobb's Articles
Mail this story
Print this story

Why you can't really rely on your cloud provider for data security

Full Story

  Nav
» Read more about: Story Type: News Story

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (2)

The article claims that no storage provider forswears all access to your data. But there is one that does - SpiderOak (https://spideroak.com/engineering_matters):

"Your SpiderOak data is readable to you alone..."

"With SpiderOak, you create your password on your own computer -- not on a web form received by SpiderOak servers. Once created, a strong key derivation function is used to generate encryption keys using that password, and no trace of your original password is ever uploaded to SpiderOak with your stored data.

"SpiderOak's encryption is comprehensive -- even with physical access to the storage servers, SpiderOak staff cannot know even the names of your files and folders. On the server side, all that SpiderOak staff can see, are sequentially numbered containers of encrypted data."
Yep. I've been a Spideroak customer for a couple of years and am happy with them. At worst they can delete your data. They can't read it.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post