4 ms·
Then we are back to the starting point. If you are already trusting Azure what's exactly the threat model the encryption is supposed to protect against?
by welterde 4y ago
Then we are back to the starting point. If you are already trusting Azure what's exactly the threat model the encryption is supposed to protect against?
- speedgoose 4y agoI see two: someone physically stealing the storage devices, or Microsoft disposing of the storage devices without destroying them first.
- welterde 4y agoWhich both mean that you cannot really trust Azure. Although the latter is an easy mistake to make for hosting providers and thus indeed a valid threat model. The theft scenario is exactly the reason why you wouldn't want to trust Azure to do the encryption for you, since they can just extract the plain text data from the virtual machine. Unless you are saying you don't trust Azure datacenter techs only? And for preventing the leakage from old storage devices very non-fancy and simplistic encryption setups are good enough (most of the complexity comes from trying to prevent/detect MITM or manipulation by the hosting provider).
- speedgoose 4y ago> Unless you are saying you don't trust Azure datacenter techs only? Yes, and also the local datacenter people. I understood that Microsoft didn’t build a datacenter in every region and rents some space in existing datacenters managed by other companies.