Re:SpiderOak Encryptr – Zero-Knowledge Password Syncing
by schoen on Tuesday April 26, 2016 @02:39PM
(#11574460)
They tried to coin a new (unrelated) sense of this term about two years ago in order to try to explain services where the service provider doesn't have access to your data. I agree that it's confusing because of the much more clearly established technical term with a different meaning, and I don't think SpiderOak's sense has caught on outside of the company.
Can anyone suggest a better term? Some people like "end-to-end encrypted" even in this context, but that doesn't really make sense for data at rest, which is almost all of what SpiderOak's products deal with.
Edit: SpiderOak has had a super-hard time marketing their privacy features to people who aren't already familiar with the fairly stark distinctions in play in different access models. I'm sure they would appreciate if someone came up with a straightforward way to explain "products where the service provider doesn't have access to your data, and can't get access without your help in any circumstances because of technical constraints".
Re:SpiderOak Encryptr – Zero-Knowledge Password Syncing
by d_theorist on Tuesday April 26, 2016 @03:10PM
(#11574671)
Steve Gibson calls this type of design "Trust No One" (TNO), which I quite like.
But I think "end-to-end encrypted" is fine and has caught on with the public to some extent.
Re:SpiderOak Encryptr – Zero-Knowledge Password Syncing
by chongli on Tuesday April 26, 2016 @04:43PM
(#11575458)
Of course, you can't really get to "Trust No One" level unless you build your own computer by hand and write its entire software stack from scratch. It's kind of an arbitrary distinction, otherwise.
Re:SpiderOak Encryptr – Zero-Knowledge Password Syncing
by y7 on Tuesday April 26, 2016 @05:09PM
(#11575647)
I think client-side encryption covers it pretty well.
Especially with zkSNARKs and practical applications like Zcash, all I can think this will accomplish is confusing people.