3 ms·
There's a difference in encrypted data at rest vs. end-to-end client side encryption. Encrypted data at rest protects against stolen physical storage devices. W
by welder 7y ago
There's a difference in encrypted data at rest vs. end-to-end client side encryption. Encrypted data at rest protects against stolen physical storage devices. Without access to decryption key stored on a separate machine, you're unable to read data on the storage device.
Encryption at rest doesn't protect users from the company, since the company has the decryption key. It protects your data if the company misplaces the storage drive.
It's common in corporate environments to check compliance boxes, which is why AWS offers encryption at rest:
https://aws.amazon.com/blogs/aws/new-amazon-s3-server-side-encryption/ https://aws.amazon.com/blogs/aws/new-amazon-s3-server-side-e...
- MereInterest 7y agoTrue, but I read a big distinction between "encrypted at rest" and "encrypted on the server". Encrypted at rest has the implications that you state, being there to prevent somebody from walking off with a hard drive. Encrypted on the server implies that it is never unencrypted while on the server, and that any server-side computation is done solely through homomorphic encryption.