I am interested in what Yishan has to say about Amazon AWS https://www.reddit.co...

regularfry · on April 1, 2016

Until we get workable homomorphic encryption, the bit about encrypted machine images is (charitably) optimistic. I wrote about this a year ago: http://blackkettle.org/blog/2015/02/19/youve-got-to-trust-yo...

anonymousDan · on April 1, 2016

Unless you're willing to trust the hardware manufacturer, at which point something like Intel SGX could be a runner.

regularfry · on April 2, 2016

You also have to trust your VM host not to provide an emulated SGX (which is what https://github.com/sslab-gatech/opensgx is, unless I'm very much mistaken).

anonymousDan · on April 8, 2016

I think you're mistaken. Intel provides infrastructure to ensure you're talking to an enclave running on an actual Intel machine, and you can then do a remote attestation to verify the contents of that enclave.

CaptSpify · on April 1, 2016

I thought this was well known already? if you send your data to someone else's server (even if you are renting it), there is no way you can be reasonably sure it will remain untouched.