[Gllug] Cloud computing ( was Re: Linux Petition )

[JLMS]

On 27 April 2012 23:48, James Courtier-Dutton <james.dutton at gmail.com> wrote:
>
> On Apr 27, 2012 5:01 PM, "Richard W.M. Jones" <rich at annexia.org> wrote:
>>
>> On Mon, Apr 23, 2012 at 03:24:47AM +0100, JLMS wrote:
>> > The question is: if all your data and communications are properly
>> > secured (encrypted disks in Red Hat, Solaris work quite well for
>> > example, and with SSDs and forever more powerful machines the
>> > traditional technical penalties for encrypting are becoming less of an
>> > issue), what exactly would be wrong with having your data in the so
>> > called cloud?
>>
>> Unless you've worked out an efficient homomorphic encryption scheme, I
>> have to tell you that encrypting the disks on your cloud machines
>> makes not the slightest bit of difference to the security of your
>> cloud data.
>>
>
> Encrypting disks provides protection for "data at rest"
> i.e. It protects when the computer is switched off. So in the cloud it
> protects when the vm instance is shut down.
> I agree, that for a cloud based always on service, not a lot of time is
> spent in the off state.
>
>

But one is supposed to be encrypting communications also (VPN, ssh, SSL, etc).

I don't see what is left uncovered ...
--
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug