5 ms·

Yep, that makes sense. IIRC, they also have some sort of global deduplication system, don't they? That also implies they have access to your unencrypted files

• ghayes 6y ago
  Not necessarily. You could use homomorphic encryption and, for example, encode the file with a hash of the file as the key material for encryption. All such files will encode identically for each user, but it will be opaque to the server what the contents are unless the server already has the plain-text of the original file. This was used by other cloud storage companies (that are now defunct).
  • rvnx 6y ago
    https://techcrunch.com/2011/06/20/dropbox-security-bug-made-passwords-optional-for-four-hours/ https://techcrunch.com/2011/06/20/dropbox-security-bug-made-... This makes me believe there is no problem for Dropbox to read content in clear.
  • TeMPOraL 6y ago
    > Not necessarily. You could use homomorphic encryption I think that's still far from being possible in practice. IIRC, the best homomorphic encryption can do now is to run simple queries on very small datasets, on a supercomputer, with performance of a 386?
  • Dylan16807 6y ago
    Convergent encryption, not homomorphic, is what you use to deduplicate encrypted files.