Earlier quoted context omitted.
You have no control about where TLS is terminated when you're talking to a 3p cloud service (with services you don't control/run like cloud LLM APIs). You also have no control about what spyware is installed on/around VMs you rent (and there's a lot). Also when talking about encryption between servers within datacenters you seem to be missing that in order for such multi -stage/path encryption (separate certs/keys) t…
> Yours and others' claims that it's impossible and nonsensical is based on lack of understanding. lol, no, it's really not. > Also when talking about encryption between servers within datacenters you seem to be missing that in order for such multi -stage/path encryption (separate certs/keys) to be possible the data first has to be decrypted at each point Why would I want the data to be decrypted at each point and wh…
I think they mean the data must have existed in plain text before it was encrypted, and will exist in plain text after it is decrypted.
At some point “your” server in a datacenter somewhere needs to decrypt the data to do something useful with it, after all you’re paying for compute, and homeomorphic encryption is too slow, so the work is done in unencrypted data.
There it is. Your data in plain text in RAM.
TLS will protect your data in transit, but it can’t protect you against a compromised recipient.