Re: File Hosting/Sharing Services [dropbox, mobile me, etc.]

[Valdis Kletnieks <Valdis.Kletnieks () VT EDU>]

On Fri, 14 Jan 2011 10:13:34 CST, John Hoffoss said:
> That's true, but then why bother trying to encrypt this data in the first
> place? Each of the scenarios you accurately laid out are still valid and
> can still lead to data compromise. The real reason, I think, as several
> others have skirted around, is that we want to appear like we've done our
> best if (when?) we get breached to avoid legal liability. Hence "encrypt
> and email (or post) that file, then email the password separately."
> Doesn't actually get us all that much, but it looks good on paper.

Good. At least some people here thought about the *real* threat model. :)

Attachment: _bin
Description: