Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

In the midst of all the news about Kim Dotcom's Mega, I started wondering: do any online backup solutions actually store your information encrypted in such a way that they cannot decrypt it?

All of them advertise SSL encryption over the wire and then on-disk encryption at the data-centers, but I have a hard time determining from their marketing literature whether they actually keep a copy of the keys to decrypt the data.

Most (all?) solutions like Backblaze and Mozy install an agent on your machine which takes care of sending your data to the backup server. It's easy to imagine an agent that generates the key locally and encrypts the files before they're sent such that the service does not actually know the key, but do any of the services do this?

Thanks!

share|improve this question

closed as off topic by Keltari, random Jan 23 '13 at 5:01

Questions on Super User are expected to relate to computer software or computer hardware within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

1  
I can't answer this as a answer due to the question being closed, but Security Now! covered this exact topic in episodes 349 and 350. Backblaze is actually talked about a lot in #350. But there a plenty of providers that offer backup storage but you keep the key. –  Scott Chamberlain Jan 23 '13 at 5:32
1  
However the drawback to this setup is if you are the only person that has the key, if the key is lost (do to a system crash or you forget your passphrase) there is absolutely no way to get your data back without brute forcing the password. –  Scott Chamberlain Jan 23 '13 at 5:34
    
I don't understand why this should be reopened. The question is not related to the technology on the computer, but rather how the security design on the "other end" handles the data. How the agent software handles the security is irrelevant, as it's very much dependent on the overall security design. –  TFM Jan 23 '13 at 6:18
    
@ScottChamberlain thanks! –  aaron Jan 23 '13 at 20:03
    
@Keltari can any of you suggest a stack exchange site where this would be appropriate? it's a strictly objective question, and it's got everything to do with technology and computers, so it seems like there would be a good fit somewhere. –  aaron Jan 23 '13 at 20:04
add comment