3 ms·
From the blurb: Mylar protects data confidentiality even when an attacker gets full access to servers. Mylar stores only encrypted data on the server, and decr
by gphilip 13y ago
From the blurb:
Mylar protects data confidentiality even when an attacker gets full access to servers. Mylar stores only encrypted data on the server, and decrypts data only in users' browsers. Simply encrypting each user's data with a user key does not suffice, and Mylar addresses three challenges in making this approach work.
First, Mylar allows the server to perform keyword search over encrypted documents, even if the documents are encrypted with different keys. Second, Mylar allows users to share keys and data securely in the presence of an active adversary. Finally, Mylar ensures that client-side application code is authentic, even if the server is malicious.
- gcb0 13y agoThe encrypted multikey keyword search is very interesting, but using a certificate for code is troubling... Also there is almost no info on the way they use the browser xss protections on the scheme. It's only briefly mentioned.