Hacker News Reader

If the server cannot be trusted, it will extract your encrypted data, since it serves up the code. The server, if compromised/subpoenaed, merely needs to serve you some JavaScript that sends home the encryption key, and your data is no longer just your data.

View on HN

The redeeming quality is that compromised servers are usually detected and shutdown quickly. Traditional servers are dumped and the data is compromised. Encrypted blob storage makes the dump nearly impossible to decrpyt.

It's OK to improve security incrementally. Better security is the path to the best security.

Compromised servers are detected and shutdown quickly? [ Citation needed ]

Reply on news.ycombinator.com