If one were to design a social media service, but with guaranteed encrypted privacy of all aspects of one's data, what are the proper technologies to employ for all of

1.) On disk storage

2.) Transport

3.) User interface

With the goal of maintaining total privacy of the data for the user's access only, based on an RSA key.

  • My suggestion would be to rely on access control instead of simply relying on encryption. Simply encrypting the data and only letting a user being able to decrypt it would present challenges when working on different granularities of data sharing. (I want to share a post with all my friends, I want to share another post with just 2-3 friends of mine etc) – Limit Jul 7 '17 at 17:50
  • 1
    Can you elaborate on what you mean by "maintaining privacy" and "all aspects of one's data?" In order to get any sort of social media functionality, there is going to be a trade off in terms of privacy. – Dan Landberg Jul 7 '17 at 21:33
  • The idea would be to have a place where a user can keep a complete digital record of their lives such as Facebook, but with that data kept entirely private. The user could then create "snapshots" of certain portions of their data to share with others. – Alex Hill Jul 8 '17 at 2:23
  • The key difference being that complete integrity of data privacy is maintained by the user from the point of upload. The service provider has no knowledge of any content. – Alex Hill Jul 8 '17 at 2:29
  • It sounds like you want something along the lines of how some online password managers work. Users provide a master paraphrase that is used to encrypt the data. The key is never available to the password management service owners. Look into LastPass, their approach may provide some insight into what your are trying to achieve. lastpass.com/how-it-works – SecretSasquatch Jul 8 '17 at 21:14

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.