241–242 of 242 posts
Earlier quoted context omitted.
This is way better than all the explanations I've been able to come up with for people about why it's important to defend weev.
That's a great explanation for why CFAA needs reformed and weev's sentenced substantially reduced to match the 'crime'. But he still dun goofed.
Earlier quoted context omitted.
It's easy to search encrypted data, you just decrypt it first. What makes you think Google would be reckless enough to store unencrypted private data on disk, or incompetent enough to not implement search over an encrypted set of data?
My suggestion was to encrypt the data client-side and store the accounts encrypted, so Google couldn't themselves decrypt the accounts. The purpose is to think of ways to structure the technologies so the hosting providers don't have to be trusted entities.
It doesn't matter if they don't normally store the key. It's a webapp.
Also, they need the key to do search. Furthermore, this does nothing to hide the metadata surrounding your communications, which necessarily must not be encrypted for services to work.