3 ms·
I agree, it's not impossible for a storage provider to also provide trustworthy E2EE. I trust some of these providers as well. It's just kind of a gut feeling
by t0astbread 6y ago
I agree, it's not impossible for a storage provider to also provide trustworthy E2EE. I trust some of these providers as well.
It's just kind of a gut feeling that centralization of power (i.e. possession of the data and knowledge about and control of the encryption mechanism) makes such a service a more attractive target to compromise.
Of course, if you really wanted to get the data of a specific person all you'd have to compromise is the encryption funnel regardless of where the data is stored. But I'm thinking, distributing control over the storage and the encryption is gonna make it a lot harder to do that because there's no single party that knows about both other than you.