The Challenges of Building Safe End-to-End Encrypted Services for Business

on YouTube ↗44m

" summary

Covers enterprise use of end-to-end encryption (E2EE) for regulatory compliance and data sovereignty, explains how E2EE works in practice, and analyzes trade-offs versus non-E2EE services. Describes practical strategies being explored to reduce the feature gaps between E2EE and conventional products.

AI-written summary · about

" chapters (17)

1. 0:00Start
2. 4:34Client-side encryption use cases
3. 5:21Key challenges
4. 7:50Benefits of envelope encryption
5. 8:38Access control options
6. 8:59Option 1 Data readers are set at send time
7. 11:03Option 2 Access evaluated at decryption time
8. 13:54Workspace approach to encryption
9. 14:29Workspace CSE Key ACL Service properties
10. 15:11Encryption with a Key ACL Service
11. 18:25Potential directions
12. 23:12Netflix Popcorn PIR database
13. 24:47On-device model tradeoffs
14. 27:23Model capabilities
15. 28:01Experimental model performance
16. 30:31How personalized impersonation detection works
17. 31:59Takeaways

" related talks

• 05mEnd to End Encryption for Mobile DevelopersHugues Bernet-Rollande · dotSwift 2018
• 24mEnd-to-End encryption for iOS DeveloperMihail Gerasimenko · UIKonf 2018
• 44mBeyond End to End EncryptionTom Leavy · AppSec USA 2017
• 23mEnd to End Encryption in Financial Data SharingDinesh Katyal · apidays New York 2020
• 22mSecurely Enable the Open EnterpriseVic Mankotia · RSA Conference Asia Pacific & Japan 2014
• 50mBuilding Production-Grade End to End Encrypted App...Ehsan Asdar, Nishil Shah · BSidesSF 2023
• 50mDeep Dive Analysis of Current Enterprise Network Security MechanismsAvril Salter · RSA Conference 2020: Mobile & IoT Security
• 30mImplementing a third layer of security (do we need it?)Jan Willem Smeenk · The Things Conference 2018