this post was submitted on 16 Dec 2023
482 points (99.0% liked)

Privacy

31808 readers
388 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] jasondj@ttrpg.network 6 points 10 months ago

It’s not that simple. The user has to hold the key. And with cloud you want it to all be accessible from all of a users devices. And with a public service you can’t count on the user to be savvy enough to use their certificates.

Of course the fix to that is that the key is stored in the account.

But then Google has the key and can decrypt it.

So then the key itself has to be encrypted. And with what? The users weak ass-password?

All encryption has to begin with something that’s known, and the weaker that initial secret, the weaker the entire system below it.