It encrypts locally and sends encrypted data to "the cloud".

sarciszewski · on July 30, 2015

That's a good model to adopt. It's also the "ubiquitous encryption" that has James Comey crying like a baby.

I encourage more apps and services to adopt this model. Just, be careful when you do. Definitely open source your code, and definitely get it audited by a qualified team (e.g. NCC Group's crypto services).

dchest · on July 30, 2015

I think SpiderOak commissioned an audit of the underlying framework, Crypton... (googled) yep: https://crypton.io/docs/security/audits.html

sarciszewski · on July 30, 2015

Yep, this was mentioned above, and by Least Authority too. They do great work.