Google Rolls Out Server-Side Encryption in Cloud Storage

Status
Not open for further replies.

knightmike

Distinguished
Jan 10, 2009
37
0
18,590
Completely encrypted. Nobody can access it except you...and the government because we give them the keys. But other than that, nobody.
 

Vorador2

Distinguished
Jun 26, 2007
108
0
18,630
How about implementing client side encryption?

You know, the one where you manage the encryption keys and absolutely nobody has access to the encrypted data except you.

Larry?

Larry Page?

....Anyone?
 

randomizer

Distinguished
While a severe security breach in a Google datacentre is highly unlikely, the fact that the keys are stored with the same people that store the data means they are much more likely to be compromised simultaneously than if the keys were kept with the client and the encryption and decryption was done by the client.
 

ddpruitt

Honorable
Jun 4, 2012
226
0
10,860
For those concerned about NSA snooping remember this is all bunk, it's only encrypted on the server so they can still see what's being sent, and they have to hand over data in response to a court order.
 

Darkk

Distinguished
Oct 6, 2003
253
0
18,930
"For those concerned about NSA snooping remember this is all bunk, it's only encrypted on the server so they can still see what's being sent, and they have to hand over data in response to a court order."

Ummm... Guess you haven't been keeping up with the news. NSA have been snooping without a court order for quite some time now.
 

TracerR

Honorable
Aug 28, 2013
3
0
10,510
This gives a false sense of security, because Google still has the keys. If you store your files on Google's servers, then they can access the files. Either law enforcement can force them to do it, or the server admins can steal your data, or just expose it through negligence. The best way to protect files is to use encryption, but it must be done locally, before files are uploaded - not on the cloud server.

There are many tools that will do this: Truecrypt www.truecrypt.org will encrypt entire disk volumes. Syncdocs www.syncdocs.com will encrypt files stored on Google Drive.

With Syncdocs or TrueCrypt you own the keys. Your files are encrypted BEFORE they are sent to Google Drive.
 
Status
Not open for further replies.