3 ms·
Mega.io (from the same people as MegaUpload) has e2e file encryption with just usernames and passwords. There is no reason the password can't be the encryption
by simfree 5y ago
Mega.io (from the same people as MegaUpload) has e2e file encryption with just usernames and passwords.
There is no reason the password can't be the encryption key, with backup keys stored with a trusted third party (eg: your credit union or bank) without notation as to what these backup keys are tied to.
- Retric 5y agoStandard passwords don’t provide enough entropy to provide secure encryption. Trusting third parties with the password in unencrypted form is either systematic in which case the FBI now just needs collect data from 2 different organizations, or on a case by case basis in which case users will mess it up. Apple etc would have no way to verify users actually did something to back up their keys. Apple’s current approach is to let users setup their own backups if they want security which allows for privacy just fine without providing a service with fundamental issues.