Re:Rclone: rsync for cloud storage
by gcr on Wednesday August 31, 2016 @09:11PM
(#12402572)
The fact that Google can offer fulltext search of documents implies they cannot be encrypted, because Google can read them.
[ Parent
| on HN ]
That depends on what you mean by encryption. The data can still be stored in encrypted files where Google has the key(s).
https://cloud.google.com/security/encryption-at-rest/#encryp...
By some definition, accessing gmail over TLS counts as "in-flight encryption" too.
Encrypting when the organization has the keys is only effective when accessing the ciphertext is easier than accessing the key material.
I'd prefer a solution where Google could only store encrypted blobs with no access to my keys and all decryption happens on the client device.