[AusNOG] Australian based cloud storage

[Mark Delany]

> But what they *say* is irrelevant. Security is not about intention,
> it's about capability. If you want your data absolutely positively
> secret, encrypt it.

And of course if you trust/verify the SDKs, there is always "Using Client-Side Encryption"
https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingClientSideEncryption.html which
excludes the possibility of the cloud provider disclosing on *any* basis whether LEA
orders or self-serving content scanning.

Personally, I think that by the time you're issuing an "aws s3 cp", the contents should
already be encrypted as out-sourcing data security seems antithetical to me.


Mark.