Client-side encryption: Difference between revisions

Revision as of 19:40, 23 February 2016

Revision as of 10:04, 10 October 2016

Line 3:

Client-side encryption is widely recognized{{who|date=February 2016}} as an exceptionally robust data security strategy. By eliminating the potential for data to be viewed by service providers (or third parties that compel service providers to deliver access to data), client-side encryption ensures that data and files that are stored in the cloud can only be viewed on the client side of the exchange. This prevents data loss and the unauthorized disclosure of private or personal files, providing increased peace of mind for both personal and business users.<ref name=infosectoday/>

Current academic scholarship as well as recommendations by industry professionals provide much support for developers to include client-side encryption to protect the confidentiality and integrity of information.<ref name="Chandra2014">{{cite book |author=Deka, Ganesh Chandra |title=Handbook of Research on Securing Cloud-Based Databases with Biometric Applications |url=httphttps://books.google.com/books?id=iiKXBQAAQBAJ |accessdate=21 February 2016 |date=31 October 2014 |publisher=IGI Global |isbn=978-1-4666-6560-6 |chapter=3 Security Architecture for Cloud Computing}}</ref><ref name="Ackermann2012">{{cite book |author=Tobias Ackermann |title=IT Security Risk Management: Perceived IT Security Risks in the Context of Cloud Computing |url=httphttps://books.google.com/books?id=3WFEAAAAQBAJ&pg=PA136 |accessdate=21 February 2016 |date=22 December 2012 |publisher=Springer Science & Business Media |isbn=978-3-658-01115-4 |pages=136–}}</ref><ref>{{cite book |title=Cloud Computing Sicherheit: Schutzziele, Taxonomie, Marktübersicht |url=httphttps://books.google.com/books?id=JgNUcgAACAAJ |accessdate=21 February 2016 |year=2009 |publisher=Fraunhofer-Institut for Sicker Informationstechnologie SIT |isbn=978-3-9813317-0-7 |chapter=Communications of the Association for Information Systems 13:Article 24}}</ref>

Examples of [[cloud storage]] services that provide client-side encryption are [[Tresorit]], [[MEGA]] and [[SpiderOak]]. As of February 2016, neither [[iCloud|Apple iCloud]],<ref name=infosectoday/><ref name=stackexchange>{{cite web |url= http://apple.stackexchange.com/questions/58508/does-icloud-use-client-side-encryption |title= Does iCloud use client-side encryption? |date= 30 July 2012 |accessdate= February 21, 2016 |website= Stack Overflow}}</ref><ref name=dataconomy>{{cite web |url= http://dataconomy.com/client-side-encryption-the-latest-trend-in-cloud-storage/ |title= Client Side Encryption: The Latest Trend In Cloud Storage |date= 8 April 2015 |accessdate= February 21, 2016 |author= Tunio Zaffer |website= Dataconomy}}</ref> [[Google Drive]],<ref name=googledriveinsecure>{{cite web |url= http://download.cnet.com/blog/download-blog/how-to-make-google-drive-more-secure/ |title= How to make Google Drive more secure: Get file encryption and strong password protection to secure your stuff. |author= Tom McNamara |date= 8 July 2015 |accessdate= February 21, 2016 |website= CNET’s The Download Blog}}</ref> or [[Dropbox (service)|Dropbox]]<ref name=“dropboxnoprivatekey”>{{cite web |url= https://www.dropbox.com/en/help/28 |title= Can I specify my own private key for my Dropbox? |accessdate= February 21, 2016}}</ref> provide client-side encryption.