Backblaze: to decrypt your backup, send us your private key passphrase
I don&#x27;t understand why BackBlaze would decrypt on their premises rather than offload that processing to the client computer. I mean they&#x27;ve shaved every other cost in their system to the bone to achieve a low cost product for the consumer, but the one area where the rubber meets the road, they chose to incur the cost of decryption.<p>I understand the vital convenience tradeoff of storing the private key. I might be willing to make that trade too if not for the various &#x27;bleed vulnerabilities known and yet to be discovered, that threaten to disclose my passphrase to evil haXor$ when the time comes to transmit my passphrase to BB.<p>And when you combine those two concepts together, it really only leads me to the conclusion that this is defective by design in order to support surveillance requests. Even ones that can only be satisfied when the user types in their PEM passphrase. Prove me wrong by implementing that so-called &quot;FINAL improvement&quot; noted at the end of that KB entry.