<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style>
<!--
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
span.EmailStyle17
{font-family:"Calibri","sans-serif";
color:windowtext}
.MsoChpDefault
{font-family:"Calibri","sans-serif"}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
-->
</style><style type="text/css" id="owaParaStyle"></style>
</head>
<body lang="EN-US" link="blue" vlink="purple" fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;"><br>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">Excellent proposal.
<div>
<div class="WordSection1"></div>
</div>
</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px"><br>
</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">One item not covered yet, is the possibility of running a key scope that is a collection</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">of encrypted items: for example the set of volumes and snapshots that are derived from</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">one master.</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px"><br>
</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">A snapshot that used the same key-id as the volume it was a snapshot of would not</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">require any copying of content to take the snapshot. Similarly if a new volume was</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">cloned from the snapshot (especially if the volume storage system supported thin</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">encoding).</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px"><br>
</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">Swift partitions could also use the same key-id on every Swift Object Server, </div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">allowing rsync replication without needing to re-key/re-encrypt/whatever.</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px"><br>
</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">The critical idea here is that the scope of a key should be motivated by the need</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">for efficient replication, snapshotting and cloning.</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px"><br>
</div>
</div>
</body>
</html>