3 ms·
The sad state of E2E encryption for cloud storage is a big part of why I wrote mobiletto [1]. It supports transparent client-side encryption for S3, B2, local s
by cobbzilla 2y ago
The sad state of E2E encryption for cloud storage is a big part of why I wrote mobiletto [1]. It supports transparent client-side encryption for S3, B2, local storage and more. Rekeying is easy- set up a new volume, mirror to it, then remove old volume.
[1] https://github.com/cobbzilla/mobiletto https://github.com/cobbzilla/mobiletto
- gertop 2y ago> Rekeying is easy- set up a new volume, mirror to it, then remove old volume. Right, just have to transfer those 10TB every time a key needs to be rotated, no biggie! I think that is the reason why most systems use two levels of keys (user keys encrypting a master key. Rotating means ditching the user keys, not the master.)
- cobbzilla 2y agoSure but at some point you need to rotate your master key. Copying is inevitable. At least your tooling can make it easy and reliable.