3 ms·
I'm not saying if they are or not, but I'm arguing from an absolutist point of view. They're probably not, but you could make just as strong an strong argument
by cameronbrown 7y ago
I'm not saying if they are or not, but I'm arguing from an absolutist point of view. They're probably not, but you could make just as strong an strong argument that GCP and AWS are probably not because at the end of the day we just don't know.
My point being, at some point in the chain you have to trust a corporation is not doing something evil. It's all a calculated trade-off at the end of the day.
- avmich 7y agoQuestion is, in which aspects you have to actually trust - with no verification or no ability to enforce - the intermediary behavior? How costly would be to avoid having trust necessary?
- cameronbrown 7y agoMy opinion as I stated before, is to follow the money trail. I'd trust Digital Ocean or Rackspace over Azure, for example, because Microsoft does get some money from advertising/tracking. If you're terminating TLS directly in 'your' cloud VM in Azure/GCP/AWS, I think that's an acceptable boundary as I don't believe these companies would risk accessing customer VMs (since it's not worth the backlash they'd receive in return from being discovered).
- deleted 7y ago[deleted]