Hacker News new | ask | show | jobs
by ianleeclark 3649 days ago
It's nice that the customer actually gets to control the encryption key. I'm not too knowledgeable on secure cloud storage systems, but from what I've heard about other cloud storage systems that encrypt files, it's typically the cloud hoster who controls the keys.
2 comments

On "other cloud storage systems", nothing is stopping you from encrypting your files before uploading them.

This is exactly what I do for personal files that I upload to S3/Glacier for archival purposes -- they are GPG encrypted before ever being transmitted.

Backblaze actually permits that:

You have the option with Backblaze to add an additional layer of privacy via a user-selected passphrase. This passphrase will be used to encrypt your private key. This passphrase is your responsibility to remember and safeguard. This is important: if you forget or lose this passphrase there is no way that anyone, including Backblaze, can decrypt, and thus restore, your data. When you choose to add your own passphrase there is no “forgot passphrase” mechanism as Backblaze does not know your passphrase.

https://www.backblaze.com/backup-encryption.html