RE: Arcjet - A Decentralized Application Server Platform

You are viewing a single comment's thread from:

Arcjet - A Decentralized Application Server Platform

in apps •  7 years ago 

I conjecture that with modern hardware, there is no way to prevent the owner of a computer from inspecting any data that resides in the computer's RAM.

This means in essence that in Arcjet, on modern hardware, you can't hide anything from the owners of the servers.

It's one thing to trust a large corporation with your data. It's another thing to trust a massive decentralized network of people with your data. If an application requires confidential data to be stored and processed in cleartext on the server, then people might not trust this system to host it.

There are some important applications that don't process confidential data. Example: 4chan. Most applications process at least a bit of confidential data, such as passwords.

You can use Arcjet to host apps with confidential data if you can keep the confidential data from being processed in cleartext on the server side. That means you process all confidential data on the client side. It also means if you store confidential data on the server side, then you store it encrypted.

I conjecture that with new hardware, you could make it possible for data on the servers to be hidden from the owner, even when in cleartext in RAM. You'd need some kind of compartmentalization mechanisms built into the hardware, in such a way that the owners of the hardware couldn't crack the compartmentalization (at least not without advanced, specialized, expensive hardware that wouldn't exist at first).

Authors get paid when people like you upvote their post.
If you enjoyed what you read here, create your account today and start earning FREE STEEM!
Sort Order:  

I've been thinking of this too. I've got another post coming up that will detail how I'm going to deal with this very issue. Also, feel free to call me if you ever want to chat. And thanks for being so involved! :D