Maybe, but Gmail just started doing that a year ago: http://www.theverge.com/2014/3/20/5530072/google-encrypts-gm...

Lets be fair here though. Google encrypted their PRIVATE data links based on the Snowden reports. Most people/companies would assume their p2p (point to point) links would be private, which to be honest is a fair assumption.

It used to be a fair assumption, but now everyone has moved to encrypt any connectivity that goes outside of your physical oversight.

Some people are paranoid enough to encrypt cross connects within the same facility that run between cages or floors, which is a sad state of affairs (but, in my opinion, sensible).

Yes, the sensible solution is for all communication to be encrypted as tools and services get up to speed on that.

There is nothing to be gained by continually making judgement calls about which communications need to be secure and which don't. Like a lot of other technology, security needs to become pervasive so we can all take it for granted and worry about productive problems.

And completely unreasonable not to suspect that the NSA can freely acquire those keys.

Only if they already have illicit access to the systems in question. In which case, considering Dropbox doesn't actually encrypt data at rest, it'd be much easier to get the data at the endpoints than in transit.

Data is indeed encrypted on the storage systems (but not on client machines, if that's what you meant).

If it were only the end-user client systems, that'd be less of a concern, but the servers that run web frontends and similar also have full access.

Not even remotely comforting. Talks all about how employees "are prohibited" from accessing your data, but that's unrelated to whether they're capable of doing so.

I much prefer the privacy policies of more secure services, which tend to say things like "we do not have the ability to access your data under any circumstances".

My point is that there are a few assumptions you should make

* A significant number of encryption technologies are broken or achievably breakable by the NSA

* The NSA has already or could easily acquire encryption keys from any large tech company with a court order in one of the secret courts

* The NSA has vast means for illicit access into systems and networks