3 ms·

A suprising oversight, but I have noticed in the heat of the moment few customers care. Without friction, the incentive is not there, given all the fires they l

• cookiecaper 9y ago
  It's not really an oversight. There's just not a good option that normal people will actually use. You could have the keyfile exist only on the consumer's computer, but then when their computer crashes, the exact reason they installed Backblaze, they aren't going to be able to access it. You could tell them to make a copy of the keyfile and store it in a safe deposit box at their local bank, but that's an additional recurring cost for the box and an additional time cost, and what if they can't get to the box when they need to restore? etc. This is one of those situations where security and convenience are diametrically opposed. If Backblaze doesn't keep a copy of your keyfile and you didn't complete steps B-D to make and keep a secure backup, you're screwed. Most consumers are better off trusting Backblaze to keep that data safe for them. You could say that they should offer this as a secondary mode of operation, but then people would say "Yes, I want the most security possible! Yes!" and then they'd sing quite a different tune when they get their backups back and can't actually use them, and Backblaze already has enough problems with their customer service dept. If you want full client-side encryption, use B2 and hook up something like duplicity to automatically difference and encrypt your files before you upload them.