Tag Info

New answers tagged

0

Android support of cipher suites (including support for SHA2) can be found here: https://developer.android.com/reference/javax/net/ssl/SSLSocket.html


0

First, client-side encryption makes it hard for the company to sell or mine your data, at least as a business model. What you say is true, you still need to verify the software does what it promises, and doesn't contain backdoors. Unfortunately the problem is still unsolved. Mostly because solving it doesn't help, too, as targeted attacks succeed through ...


4

Client-side encryption does not protect against a malicious trusted application provider who decides to subvert their own system. It does protect against attackers who breach the central store. Those people cannot decrypt without keys, and if the provider doesn't have the keys (the key feature (sic) described above), then the attacker can't steal those in ...


6

I know that one should not count on anything on the client side for security This message has become slightly garbled. Really, it should be that the security measure needs to be done on the same side of a security boundary as the system it is protecting. For the common case of a forms-based web app that makes the server side the place where the attack ...


0

Yes: Windows EFS at least, can be used that way. Each file is encrypted with a unique, random key and that key is the encrypted once for each user who has access to the file and the result is stored in the NTFS alternate data stream of the file So, as long as the NAS supports NTFS, you can use EFS on it and the actual file storage server will never see the ...



Top 50 recent answers are included