5 ms·
End-to-end encryption of metadata and data costs almost nothing these days. In terms of liability, knowing anything about clients' data or metadata present unre
by bayareanative 7y ago
End-to-end encryption of metadata and data costs almost nothing these days. In terms of liability, knowing anything about clients' data or metadata present unreasonable risks. SpiderOak, Tarsnap, BackBlaze... I still have to due-diligence Rsync.net, iCloud and Box. Dropbox, Microsoft, Google Drive, Mozy, iDrive and now Crashplan are no-go's.
- teh_klev 7y ago> End-to-end encryption of metadata and data costs almost nothing these days. Oh sure. But from what I can discern from Crashplan's website, the encryption appears to be end-to-end, i.e. their client side app does the encryption (and hopefully the keys are only stored locally, so once the data is in their cloud no-one can peek at your data - ala Tarsnap). Realistically you cannot pre-encrypt every file on the machine you're backing up as the parent commenter suggested (show me an encryption app that can properly handle locked/in-use files - especially on Windows), you need to have some trust that the backup provider you're using can be trusted and be trusted not to communicate your encryption key to their cloud as well. But I agree, Dropbox etc...I wouldn't dream of using them "as-intended" with their client apps because I can't trust they're not looking at stuff they're not supposed to be. The only time I work with these products is via my web browser.
- dividuum 7y agoI guess that's why you'd want to use tarsnap, borg or restic. All of their source code is available and ready for inspection and no trust is required if you have the time and capability to verify their claims.