On Wed, Mar 24, 2010 at 10:41 AM, Jason Funk <[email protected]> wrote: > Hello, > I have an idea for a web application and am starting to do research > on the design and implementation. I ran across GAE and it seems to fit > all the requirements. I have two quick questions though: > > 1) The application will require users to enter secure data. Assuming > the application is secure, could I reasonably tell my users that their > information isn't going to fall into the hands of Google?
You could ask the same question of any hosting provider, and the answer is the same. Someone at the data center could hack root on your box at will and take all your data. The only way to guarantee security is with strong symmetric encryption implemented on the client, and off-site backup. And of course, this only addresses privacy and loss which is a small part of the entire security issue. The nice thing is that if Google steals your data and you can prove it, they have about $30bn in cash you could go after in court. That said, Google has enough data, it almost certainly doesn't care about yours. > 2) I've noticed a few places that says that this is a preview release. > Is there some assurance that Google isn't going to come along one day > and say "That was fun. All done." and poof, there goes all my work? Now that's a damn fine question. > > > Thanks, > Jason > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/google-appengine?hl=en. > > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
