Client-side encryption: Difference between revisions

Revision as of 08:13, 8 July 2024

Latest revision as of 17:41, 12 November 2024

(One intermediate revision by one other user not shown)

Line 3:

Client-side encryption allows for the creation of applications whose providers cannot access the data its users have stored, thus offering a high level of privacy.<ref name=":9"/>

Applications utilizing client-side encryption are sometimes marketed under the misleading or incorrect term ''"zero-knowledge"'',<ref name=":10"/>, but this is a misnomer, as the term [[zero-knowledge proof|zero-knowledge]] describes something entirely different in the context of cryptography.

==Details==

Client-side encryption seeks to eliminate the potential for data to be viewed by service providers (or third parties that compel service providers to deliver access to data), client-side encryption ensures that data and files that are stored in the cloud can only be viewed on the client-side of the exchange. By remaining encrypted through each intermediary server, client-side encryption ensures that data retains privacy from the origin to the destination server.<ref>{{Cite web|date=2015-05-25|title=What is Client-side Encryption and Why Does It Matter?|url=https://www.virtru.com/blog/client-side-encryption/|access-date=2021-05-05|website=Virtru|language=en-US}}</ref> This prevents data loss and the unauthorized disclosure of private or personal files, providing increased peace of mind for its users.<ref name=":9"/>

Current recommendations by industry professionals as well as academic scholars offer great vocal support for developers to include client-side encryption to protect the confidentiality and integrity of information.

Line 20:

===Examples of services that optionally support client-side encryption===

* [[iCloud|Apple iCloud]] offers optional client-side encryption when "Advanced Data Protection for iCloud" is enabled.<ref name=":3"/><ref name=":4"/>

* [[Google Drive]],<ref name=":6"/>, [[Google Docs]],<ref name=":6"/>, [[Google Meet]],<ref name=":7"/>, [[Google Calendar]],<ref name=":7"/>, and [[Gmail]]<ref name=":7"/> — However, as of Jul 2024, optional client-side encryption features are only available to paid users.<ref name=":8"/>

===Examples of services that do not support client-side encryption===