3 ms·
> How do you delete data from backups written to persistent media? You encrypt each user's data with unique symmetric key and store the key in HSM or other ext
by magnat 9y ago
> How do you delete data from backups written to persistent media?
You encrypt each user's data with unique symmetric key and store the key in HSM or other external, rewritable media. When requested, you delete the key for a given user, rendering user data in backups unusable.
- merinowool 9y agoI don't think that is feasible, because you don't know if this data could be easily decrypted in the future. What do you do with existing data written to persistent media?
- DelightOne 9y agoWhat do you think is reasonable if you say encryption and deletion of said key is not reasonable effort enough?
- heavenlyblue 9y agoWhat do you do with the futuristic tech that allows one to read all of the possible data written to a given hard drive? Your point is highly hypothetical.