Securing Trovebox with client side encryption

The user’s going to pick dancing pigs over security every time.Bruce Schneier

At Trovebox we’re always thinking about the future of keeping your photos accessible and safe. It’s why we’ve been entirely transparent since our start 2 years ago. Our features, bugs and even our source code are part of a collaborative space where thousands of you have weighed in and participated.

Today, we’re continuing that tradition of openness. I’m convinced that cloud storage is the future for most of the population. Each day more and more of our content goes off into the cloud to reside. Trovebox was originally built with that in mind; though we don’t force the cloud on anyone.

image
Source @CarbonNYC on Flickr.

In 2011, I hypothesized that people would benefit from added ownership and portability of photos which they store in the cloud. 2 years later we’ve proven that hypothesis to be true. 33% of users on Troveobox.com store their photos in their personal cloud account. And we’ve migrated hundreds of thousands of photos between different storage services. This doesn’t include the many individuals and organizations that run Trovebox themselves.

Now we have another hypothesis; that people would also benefit from having their files encrypted before being stored in the cloud. Trovebox already provides several advantages to users who want to select a company they trust with the storage of their photos. In fact, they can choose from any of the 6 cloud services we support today. But maybe there’s even more we can do.

We want to start a discussion on the usefulness of file level encryption. There are lots of ways this can be accomplished (symmetric vs. asymmetric, etc.) but we’re really interested in understanding if people would benefit from photo software which provides security in addition to data ownership and portability.

This is our first step in finding out and if our hypothesis proves true then we’ve got some exciting things planned.

We’d love to hear your feedback on Twitter or Hacker News.

— Jaisen

read original post on Trovebox's Site