|
For the record, I understand that absolutely no service is safe, and "the only way to keep a computer from getting hacked is to never connect it to the network". So, we've got that out of the way. I wanted to understand the Dropbox has started encrypting its data-at-rest with 2048-bit AES encryption. So, my simple question is, do we still need to encrypt our Dropbox contents with TrueCrypt? Are there any real advantages in terms of security/encryption in using Dropbox? |
|||||||||||||||||||||
|
|
It does not matter much how the data are encrypted as long as the owner of the data is not the only one in control of the encryption key. This in effect means that data encryption and decryption should only be done at the client and only in a safe environment where only trusted software is running. This is not the case with Dropbox: Dropbox has access to the plain data both from the Dropbox client running on your system and on the server side before encrypting for rest. Also Dropbox can decrypt the data whenever they want because they have access to the encryption key. And they will do it for sure and without you noticing when law enforcement requires it. Whether you consider this safe enough for your own use is your own decision. |
|||||||||
|
|
Encrypting your data with truecrypt prevents an attacker from easily reading your data if they steal it. It also prevents (as Steffen says) Dropbox from reading your data and it also adds another layer of protection if your account is compromised. If Dropbox themselves encrypt your data at rest it can still help prevent an attacker from easily reading your stolen data. But Dropbox can still easily read your data, and anybody who gains access to your account will also be able to as well. |
|||||
|
