4 ms·
A non-deletion strategy should consider including an encryption and key management strategy to enable retroactive secure deletion without impacting availability
by oakwhiz 4y ago
A non-deletion strategy should consider including an encryption and key management strategy to enable retroactive secure deletion without impacting availability, reliability, and performance. This seems to be missing from a lot of systems that deal with personal information.
- spelunker 4y agoalso called crypto shredding! We had this issue trying to square GDPR-type things with an append-only store.
- klabb3 4y agoAbsolutely. And not only that, but you need storage that you can delete the keys from, even if the primary storage is append only. It may sound like a trivial detail, but shredding gets harder and harder for every new layer of “smartness” that SSDs and file systems provide for convenience.