Hacker News Reader

Encryption at rest does nothing to prevent online access to data. It's only useful if you leave your storage cabinet standing on the side of the road.

Your laptop backup could be encrypted. New problem: where to out the keys. Maybe another storage account with different access controls.

> New problem: where to out the keys.

If it's windows, Active Directory.

Per the article, the Azure bucket was explicitly shared. Azure Storage is generally encrypted at rest (https://learn.microsoft.com/en-us/azure/storage/common/stora...).

What do you think "encryption at rest" means