Re:Evernote hacked
by UnoriginalGuy on Saturday March 02, 2013 @11:27AM
(#5309942)
Encryption on /what/? Point to point or content encryption? Also if your password has been compromised and that same password is used to encrypt your data then what exactly would encryption do?
[ Parent
| on HN ]
Re:Evernote hacked
by quinndupont on Saturday March 02, 2013 @12:26PM
(#5310205)
Data encryption with a private key that the user holds. Evernote, like Dropbox, etc. have your crypto keys, and thus will always be subject to hacking and such. If I, and only I, had the keys it would be up to me to keep them safe, and my data would not succumb to a hack of their database, etc.
Re:Evernote hacked
by UnoriginalGuy on Saturday March 02, 2013 @01:13PM
(#5310369)
But password resets would quite literally be impossible.
Encryption on the notes. Who would ever promote using the evernote login to encrypt?!
Re:Evernote hacked
by martinkallstrom on Saturday March 02, 2013 @11:57AM
(#5310088)
Passwords are typically not used for encryption, since you don't want to re-encrypt data when user changes the password.
Re:Evernote hacked
by lawnchair_larry on Saturday March 02, 2013 @12:03PM
(#5310112)
Yes they are, just in a more complicated way. You don't have to re-encrypt if the user changes their password. FDE would be pretty useless if so.