On Wed, May 19, 2010 at 12:13 AM, Roger Williams <roger at qux.com> wrote: > Moreover, all of the popular online backup services rely on encryption in the > link (SSL) and cloud (AES usually), rather than encryption with your own key > in the client before it's uploaded. That's not true-- JungleDisk, for one, encrypts before uploading: "By default Jungle Disk encrypts files that are stored on S3 prior to uploading them using 256-bit AES. ... You have several options for controlling your encryption key. The first option is to use your AWS Secret Key to derive the file encryption keys. This helps make the encryption as seamless as possible and protect users from losing their data due to forgetting a key, since the key can be recovered from Amazon. If you prefer, you can also specify a custom encryption key if desired. Note that if you forget your key there is no way to retrieve it or your data." (from the JungleDisk blog; I've been a satisfied JungleDisk user for a couple of years now). -- -- Gavin Andresen http://gavinthink.blogspot.com/