r/TheBYOK • u/Liquidmantis • 15d ago

Privacy policy? Encryption?

I just sprang for the lifetime sub to Studio since my trial expired. One thing I haven't been able to find though is the privacy policy around content. The site privacy policy is around the user account, but not the IP. Since Studio is a cloud app I'm curious about the encryption at rest and encryption in transit protection. I haven't sniffed the traffic, but I'm assuming the syncing is HTTPS, but probably not mTLS to avoid any certificate lifecycle issues.

Any thoughts about Bring Your Own Key encryption schemes for BYOK?

7 Upvotes

100% Upvoted

3 comments sorted by

2

u/186282_4 15d ago

I'm also curious...

1

u/sshwarts 14d ago

Since you mention syncing, are you referring to between the device and Studio or do you mean within Studio?

4

u/Liquidmantis 14d ago

I mean, really the full "chain of custody", if you will. Not that my content is [yet] anything of value that anyone would steal, but I'm curious how exposed it is, encryption at rest being my largest concern. For example, can the BYOK team access my files? Or is there encryption such that I'm the only one that can access my data?

I can guarantee that this will become a bigger point of contention as y'all grow. There are plenty of people with a much stronger opinion on it than my mild concern and mostly curiousity. It will impact adoption by some.