tl;dr pr piece: > · Customer content moving between customers and Microsoft will be encrypted by default. > · All of Microsoft’s key platform, productivity an

tl;dr pr piece: > · Customer content moving between customers and Microsoft will be encrypted by default. > · All of Microsoft’s key platform, productivity and communications services will encrypt customer content as it moves between Microsoft data centers. > · Strong cryptography to protect these channels, including Perfect Forward Secrecy and 2048-bit key lengths. Microsoft already does each of these today (for sure Exchange and SQL, which I know the best), and they have done them for years now. Nothing changes. The more important question is how Microsoft manages the keys for this encryption, because when I was there the keys were still based on NSA-approved root keys...