Hacker Timesnew | past | comments | ask | show | jobs | submitlogin

In-transit encryption is a no-brainer.

The most secure (from a trust point of view, at least) method of encrypting file is obviously at rest, client-side.

Seafile uses that method, but fails on the implementation on some aspects.

"In-place" encryption versus "volume/disk" encryption both have major drawbacks and are hard to implement correctly.

In case of "in-place", the private key is a possible vulnerability (like leaving the key under the doormat).

In case of disk encryption, while it's mounted, it's worth nothing if (when) you are compromised.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: