5 ms·
Dropbox and Gmail are already encrypted - the problem is who else can get at the keys. And which other credentials of yours can be compromised starting from the
by zurn 14y ago
Dropbox and Gmail are already encrypted - the problem is who else can get at the keys. And which other credentials of yours can be compromised starting from there.
- TillE 14y agoEncryption that is out of your control is not encryption in any meaningful sense. You must be the only one who has the key, else the whole process is compromised.
- droopyEyelids 14y agoThis is a pet peeve of mine, let me know if I'm being a pedant: Encryption that is out of your control is encryption in a specific, meaningful sense. I believe to effectively use encryption, you have to understand the trade-offs involved and limitations of the technology. So, Google's encryption is terrific in terms of protecting you from war-drivers. But it won't protect you from the focused attention of the FBI. That doesn't make it good or bad, it's a tool with specific uses and limitations. I think that lesson needs to be absorbed with all forms of encryption. It's a particularly dangerous area to pop-sci oversimplify.
- moheeb 14y agoThis is a very good point. You're still putting locks on your doors, but those locks aren't going to stop the SWAT team.
- darkarmani 14y agoIsn't this tarsnap's selling point? I'm not a user of it, but it seems like a sound service for backup (not cloud sharing of data).
- AJ007 14y agoThere are quite a few options available from the stand-alone, like SpiderOak, to things that sit on top of Dropbox, such as Boxcryptor. What I haven't seen is a comprehensive security review of these alternatives. There could be bugs, flaws, or they could outright not be doing what they claim to do.
- qu4z-2 14y agoI thought tarsnap's main selling point was cperiva.
- p6v53as 14y agoJust because it is not plain text does not mean it is secure.
- potensmus 14y agoIn fact someone from either the EFF or the ACLU gave a talk at DEFCON20 and mentioned Dropbox specifically. In their terms of service they state that they will decrypt anything in their possession upon request by law enforcement. So... if you still want to use Dropbox I would suggest encrypting anything before putting in a dropbox. DON'T EVER! assume one of these companies has your best interests in mind and won't sell you out at the first hint of a NSL or subpoena.