[tahoe-dev] a fundamental problem
secorp at allmydata.com
Fri Sep 14 00:17:19 UTC 2007
One idea that we have thought about in this area is to partner with
third-party escrow service that would provide key recovery services thus
removing Allmydata from the management of them.
I'd be interested in other people's thoughts on this or any other ideas
regarding this issue.
> My friend Niels Ferguson, cryptographer and Microsofty, had this to
> say about Allmydata.
> Begin excerpted forwarded message:
> > From: Niels Ferguson <niels at microsoft.com>
> > Date: September 10, 2007 5:56:53 PM PDT
> > To: zooko <zooko at zooko.com>
> > Subject: RE: Remember DigiCash?
> > It is great to hear that you are enjoying yourself, and from what
> > you say you are definitely in the right place at the moment. I
> > remember we discussed some technicalities of the ECC for a similar
> > distributed storage system. It is a cool technology. The only real
> > question mark I have is the legal situation w.r.t. law-enforcement
> > access and stuff. From my quick perusal of the website it isn't
> > clear whether Allmydata ever has access to the encryption key; if
> > they do they become a subpoena target which can be expensive and
> > threaten the company's reputation. If they don't have access to the
> > encryption key it is hard to ensure availability of the backup.
> > That is a hard choice to make.
> tahoe-dev mailing list
> tahoe-dev at allmydata.org
More information about the tahoe-dev