search

datalad / datalad-openneuropet

Other
0 stars 1 forks source link

No (additional) cloud-side encryption? #3

Open mih opened 1 year ago

mih commented 1 year ago

OpenNeuroPET plans to upload encrypted data only. I understood this as client-side/pre-upload encryption. It remains to be decided how the encryption keys are implemented (git-annex?) and exchanged.

adswa commented 1 year ago

@cpernet talked about encryption at REST on the Azure servers, which presumably gets decrypted prior (?) to transport.

mslw commented 1 year ago

I also understood it as server side encryption, where access (by login/token) is sufficient to obtain the decrypted content. Encryption in transfer probably refers to TLS.

mslw commented 1 year ago

General docs on Azure Storage encryption for data at rest found by @adswa

CPernet commented 1 year ago

yep, I'll just upload files as it is and let Azure deal with encryption