3 ms·
Backblaze looks great, but I really don’t understand their encryption model, and why they made the choices they did. They’re so close to being properly end to e
by noodlesUK 7y ago
Backblaze looks great, but I really don’t understand their encryption model, and why they made the choices they did. They’re so close to being properly end to end encrypted, but when you do a restore, the decryption is done on the server side. Why? Why not just bake that into the client?
Other systems like restic manage to do this correctly, why not the biggest player in the backup space?
- deleted 7y ago[deleted]
- tqkxzugoaupvwqr 7y agoThis is what turned me away from Backblaze Backup. I think it is disingenuous from them to advertise with “Encryption” and “Personal Key”[1] because it gives the impression of end-to-end encryption. In reality it is just a feel-good thing. As soon as you want to restore data you must provide them with the key and they decrypt your data on their side before sending it to you. When I inquired about this strange architecture they avoided explaining the reason which made me even more distrustful. It’s like a honey pot. Advertise encrypted backups to become big, force server-side decryption when people really need their data. [1] https://www.backblaze.com/cloud-backup.html https://www.backblaze.com/cloud-backup.html