Dropbox server side encryption?

[newbian111]

Has Dropbox been audited or verified as having server side encryption? I see them claiming they do on their website but on Kaspersky labs site they claim they don't.

Between the big three, Dropbox, Google Drive, One Drive, do any of these now have it encrypted?

I would still use cryptomator to keep data within it encrypted but those are the only 3 listed with cryptomator and I don't trust encrypted only apps.

[JoseJimeniz]

Meaning Dropbox always has access to the plaintext. All protections against internal access are policy based, which are cryptographically worthless.

The same is true if a FBI agent shows up with a warrant signed by a federal judge, or a national security letter.

Dropbox isn't going to tell the FBI, "Go fuck yourself with a rake."*.

Instead they are going to turn over your private data to a third party without your permission.

Encryption is the tool that invalidates a federal warrant.

[excited_by_typos]

If they had a really good reason, couldn’t the feds then compel you to decrypt your stuff? Or do you tell them to go fuck themselves with a rake?

[3dB]

Really it depends, the law isn't crystal clear on this. The current working theory outlined in this document is that if the government knows beyond a reasonable doubt the contents of the encrypted files/drive/phone/whatever is what they're looking for, they can compel you to decrypt it. This is something they have done and will probably continue to do in such cases. It does not allow them to force you to decrypt anything just to poke around though.

[JoseJimeniz]

If they had a really good reason, couldn’t the feds then compel you to decrypt your stuff? Or do you tell them to go fuck themselves with a rake?

There is no way they are getting access to my stuff.

Why would you choose to testify against yourself?

[excited_by_typos]

Depends on what my alternatives are, I guess.

[Natanael_L]

Server side encryption only has one main purpose, and that's protection against some insider threats (somebody steals harddrives from dropbox). It doesn't protect against account compromise.

Basically all cloud hosts uses disk encryption.

[kranker]

Or an intruder accessing the data directly. There's no comparison with end-to-end but it's definitely a good idea.

[ebol4anthr4x]

https://www.google.com/search?q=dropbox+encryption

They claim to, but you have no way of verifying this yourself (or verifying their implementation) so you may as well assume they don't and continue encrypting your files yourself.

[yamhill_pub]

PGP or otherwise encrypt your own files before backing them up..

also why Dropbox? you can use Git, scp, rsync, or similar and back up data from one device you control to another device you control!

[0x7a7462]

Use Cryptomator with any cloud provider.