4 ms·
This sounds as if they are doing users a favor: We manage the encryption keys on our users’ behalf. To be completely clear to users, they should instead write
by 16s 16y ago
This sounds as if they are doing users a favor:
We manage the encryption keys on our users’ behalf.
To be completely clear to users, they should instead write:
We hold the decryption keys and can decrypt your data if compelled to do so. If you don't want us to be able to decrypt your data, encrypt it yourself with GPG or OpenSSL before sending your data to our site.
Edit: Spelling & clarity.
- palish 16y agoThey said almost exactly that. "If you want to be completely secure, use a program such as TrueCrypt to create an encrypted drive within your Dropbox."
- brk 16y agoNo, they shouldn't write that. Dropbox is a consumer file storage company. Statements like that will confuse the majority of their target market and stall adoption of the service. What Dropbox is doing in relation to security/encryption is about the best possible solution that balances features and function with data protection for files that might be leaked or stolen. If you have suggestions for Dropbox, lay out concise technical suggestions. Writing new legalese for them is not solving any of the problems that people are getting so worked up about.
- extension 16y agoEither way, those users will not understand the security of the service they are using. At least with the long version, they'll be aware of their lack of understaning.