4 ms·

I would really like #2 to have the option of sending encrypted files on disk or zip, and y'all providing a client that will decrypt them using my passphrase, lo

I would really like #2 to have the option of sending encrypted files on disk or zip, and y'all providing a client that will decrypt them using my passphrase, locally. Nothing personal, but I really don't want y'all seeing my data, even if I need to restore. (context: I've been a Backblaze user for years and love the hell out of you. I've never really thought of how the restore would work with my encrypted data, though. Turns out the story is ... not what I had hoped)

BillinghamJ 9y ago
Yeah, I don’t see how they would impact usability in any way. Just have the client software perform the decryption process.
infogulch 9y ago
This would be the ideal situation. It would require the capability for the desktop application to be able to restore encrypted data from a USB drive, but it would be a good midpoint between #2 and #4 that I think many security-conscious users would find acceptable. Bonus points for open sourcing a tiny "backblaze decrypter" command line utility that can do this manually. Though maybe that's a stretch.
SimonPStevens 9y ago
Yes, +1 for this. This is what I want, #2, but with a restore that transfers the encrypted data and decrypts locally. This is how CrashPlan worked. (And incidentally, as I'm sure the guys at backblaze are fully aware, CrashPlan home is shutting down and I'm currently struggling to find a replacement that meets my desires. So if backblaze started to offer that #2 + encrypted restore soon they would gain my custom at the least.)
brianwski 9y ago
> Nothing personal, but I really don't want y'all seeing my data, even if I need to restore. We totally understand, especially about the (very real) security issues. I would reassure you that Zip file restores are COMPLETELY automated and with thousands of them happening every day no Backblaze employee ever sees your files. The USB restore drives are placed in an envelope by a human, but they are encrypted when they are placed in the envelope so there is still no danger of any person seeing your files. Plus we take our customer's privacy VERY seriously and it would be a firing offense for any Backblaze employee to ever look at a single customer file (or file name) without that customer's explicit permission.

BillinghamJ 9y ago

Yeah, I don’t see how they would impact usability in any way. Just have the client software perform the decryption process.

infogulch 9y ago

This would be the ideal situation. It would require the capability for the desktop application to be able to restore encrypted data from a USB drive, but it would be a good midpoint between #2 and #4 that I think many security-conscious users would find acceptable. Bonus points for open sourcing a tiny "backblaze decrypter" command line utility that can do this manually. Though maybe that's a stretch.

SimonPStevens 9y ago

Yes, +1 for this. This is what I want, #2, but with a restore that transfers the encrypted data and decrypts locally. This is how CrashPlan worked. (And incidentally, as I'm sure the guys at backblaze are fully aware, CrashPlan home is shutting down and I'm currently struggling to find a replacement that meets my desires. So if backblaze started to offer that #2 + encrypted restore soon they would gain my custom at the least.)

brianwski 9y ago

> Nothing personal, but I really don't want y'all seeing my data, even if I need to restore. We totally understand, especially about the (very real) security issues. I would reassure you that Zip file restores are COMPLETELY automated and with thousands of them happening every day no Backblaze employee ever sees your files. The USB restore drives are placed in an envelope by a human, but they are encrypted when they are placed in the envelope so there is still no danger of any person seeing your files. Plus we take our customer's privacy VERY seriously and it would be a firing offense for any Backblaze employee to ever look at a single customer file (or file name) without that customer's explicit permission.