top | item 4809764

(no title)

owendbybest | 13 years ago

It's time for more encryption, at least for anything we store in "the cloud".

discuss

order

smokeyj|13 years ago

I wish there was a router that could automagically handle encryption. This way even grandma could plug in her "freedom box" behind her router and have secure communications. Maybe a simple web based admin page to manage configuration.

1337biz|13 years ago

Would love to see this, i.e. some open source box, that just handles OpenVPN and TrueCrypt for the local network. As an idea it sounds not that overtly complex to realize - just hoping somebody will take something like this one day on Kickstarter.

jim-greer|13 years ago

That sounds very hard. How does it know to encrypt my Google docs, but not my public tweets?

jiggy2011|13 years ago

Specifically encryption using your own key that you never transmit to a third party/your cloud provider.

mtgx|13 years ago

I'm hoping web crypto will solve this, but only if the e-mail and storage service providers offer the option in an intuitive way, and I don't think the big ones like Google and Microsoft will want to do that unless we all demand it. It's also not going to be a finished draft until 2014, so we have to wait a little more.

http://www.w3.org/2012/webcrypto

thematt|13 years ago

Web crypto will never solve this, especially not when provided by a big company like Google/MSFT. They'll always have provisions to make the unencrypted version available to authorities. You can only trust client side encryption.

fauigerzigerk|13 years ago

If you do that "the cloud" can do nothing with that data. You wouldn't be able to search your gmail account without storing it all offline unencrypted. The only cloud service that just about works with encryption is backup.

nathan_long|13 years ago

Not necessarily... My pitiably incomplete understanding of something called "fully homomorphic encryption" is that it offers the possibility of letting someone else do operations (math, search, etc) on your encrypted data, giving you useful results, without them ever actually seeing the plaintext data.

My understanding is that this is still in the experimental stage.