3 ms·

Let me point out the key line of my comment: And I don't want to bother handling my own encryption keys. The proof is quite simple. If I don't have my own keys

Let me point out the key line of my comment: And I don't want to bother handling my own encryption keys. The proof is quite simple. If I don't have my own keys I have no information the NSA lacks. Thus, they can only access the same information I can. Homomorphic encryption would theoretically allow google to do encrypted indexing, but I still need to handle my keys to construct the query. It's also mainly theoretical at this point, though I am eager to see it built for real.

jfindley 12y ago
There's no reason that handling your own keys has to be something that you, personally, have to bother with. Just because you don't interact with the key handling doesn't mean it can't happen in a safe and secure environment on your local machine. Yes there are plenty of implementation concerns, but that doesn't mean they're insurmountable. It's so possible, in fact, that ongoing work is happening in exactly this space. See https://code.google.com/p/end-to-end/ https://code.google.com/p/end-to-end/ for example.