We will shortly be releasing a follow-up blog about how this affects Storj's typical end-to-end encryption promise. In short, the system is designed to protect your data at rest. Access grants never remain decrypted longer than they are needed, and only a hash of the access key is ever persisted. The access grants are individually encrypted using information from the much shorter returned access key, which is not stored in our authorization service.
It should be noted that the upcoming multi-tenant gateway authorization service saves access grants encrypted into a database. For our upcoming multi-tenant gateway, we use the same terminology as S3 credentials: access key and secret key. Storj offers an S3-specific authorization service, which maps S3-compatible credentials to a Storj access grant. The distributed security tokens (access grants) that Storj uses contain too much detail to fit into an S3 access key or secret key field. Where the Storj network really excels compared to centralized providers is in its privacy and security, so we'd be remiss in not addressing these topics specifically as they pertain to S3. We support organizing objects by bucket and key, all HTTP verbs including HEAD, byte-range fetches, as well as uploading files in multiple parts. For example, core features such as basic upload and download, of course, should map quite easily to the new ecosystem, including systems like Storj. All you have to do is point files to the new buckets and migrate any static data you'd like to keep. By making a storage system compatible with these APIs, it makes it much easier for users to migrate to new services without much effort. Since then, the grand majority of cloud storage services have reinforced this interface, and the majority of people storing data in the cloud use similar architectures.Īmazon S3 is accessed via APIs, most of which rely on the HTTP protocol and XML serialization. These objects are stored in buckets rather than a hierarchical system. Object storage organizes data into objects, which contain the data itself, its metadata, and a unique identifier. When Amazon launched its S3 service 15 years ago and created the cloud storage industry, it also unknowingly made object storage the standard for storing data in the cloud.
0 kommentar(er)
