4 ms·
Encryption scheme choice doesn't mean much if the devices send all the data to US-controlled "clouds". NSA will be able to read everything anyway.
by codedokode 8y ago
Encryption scheme choice doesn't mean much if the devices send all the data to US-controlled "clouds". NSA will be able to read everything anyway.
- saagarjha 8y agoIf your encryption is strong and end-to-end, it doesn't matter where your data goes.
- codedokode 8y agoIt does matter. Because there are many people who have access to the servers and they can cooperate with government agencies voluntarily or involuntarily. For example, if you use "voice assistant" from some major company, what prevents it from voluntarily sharing all the records with the government for the sake of national security? What prevents its employee from secretly sharing the data under some legal obligations? The location of the server is really important here.
- m3rc 8y agoThe point of E2E is that it doesn't matter who owns the server. "End to End" means end to end, not 'end to middle then decrypted then to end'. If it's ever decrypted anywhere but an endpoint it's not E2E, by definition.
- mc808 8y agoIn the voice assistant example, the server is one of the endpoints. The point they're making is that E2E doesn't really help there if you can't be sure who is looking over shoulders on the other end. If the two ends are both under your control or scrutiny, then it doesn't matter who's hiding in the clouds... Except for metadata of course.
- codedokode 8y agoTypical IoT device usually talks to the server where all the received data are often stored for futured use. If they used E2E, server wouldn't be necessary - it would make more sense to connect directly inside home WiFi network for example.
- okmokmz 8y agoOnly if you're operating under the assumption that the NSA has broken all modern encryption algorithms
- svnsets 8y agoThe question isn't has the NSA broken all modern encryption algorithms, but rather will the NSA break all modern encryption algorithms and when.
- codedokode 8y agoWhy do they need to break encryption if they can come to any datacenter and copy data from the server? Or install a backdoor. Or get a subpoena for the data?
- a1369209993 8y agoThe data is only encrypted during network transit; the "clouds" decrypt it in order to perform requested data-munging and unrequested snooping.