3 ms·
Yes, it's funny, you would think end-to-end encryption would satisfy most concerns, but it does not. I don't know if that is because people don't trust / unders
by zmmmmm 13y ago
Yes, it's funny, you would think end-to-end encryption would satisfy most concerns, but it does not. I don't know if that is because people don't trust / understand it, or whether it's legal (maybe you still go to the same prison if your patient data was stolen encrypted as if it was stolen unencrypted). It may be logistical (how do you keep track of the keys, what do you do if the encryption system you used later becomes compromised, or a rogue employee makes off with the keys, etc.). In any case, encrypting the data is not seen as a silver bullet to resolve the risks posed by cloud computing, and certainly nobody at all is proposing to shove data up to the cloud unencrypted - so that itself is not the issue anyway.
- damarquis 13y agoI think it is mainly a logistical issue. The problem is that encryption keys are a single point of failure. IT practices at most businesses would have to be very rigorous before a design with a single point of failure for any significant part of the IT infrastructure could even be remotely considered. Changing business practices to decrease the risk of using end-to-encryption to an acceptable level has an associated cost which, at most companies, probably dwarfs the cost of its technical implementation.