Werner Vogels

It might be commercial actors who are interested in that kind of data, even if it's five years old.

It might have all the relevant data for them to take action on.

Well, there's of course different types of encryption.

You have lattice-based encryption and you have that.

So there are types of encryption that you will be safe from sort of this type of decryption.

But you need to start installing that now.

You know, LibSSS was 600,000 lines of code or something like that.

I mean, you can imagine that because it had all sorts of different types of encryption in it.

At some moment, we started realizing at Amazon that running all of our contents with libSSS was a major vulnerability.

And so we implemented TLS with a limited set of encryption technologies and just put that in front of S3, for example.

First of all, much cheaper, but we made it open source and we made sure that it is fast and inspectable.

And more important, written in a way that we can use automatic reasoning to see whether or not we're protecting ourselves.

So the most important part, I mean, now you hear more and more about automatic reasoning, but people like Byron Cook, who have been working at Amazon for the past 15 years on these kind of problems, proving to ourselves that we are protecting our customers.

That's not a press release that is going out or something like that.

But there are technologies that you can use to sort of prove to yourself.

SLM, signal to noise, was the original name of the open source project, was purely also intended to get post quantum encryption in the hands of everyone.

I told you, now you got scared about the data harvesting.

Let me scare you a little bit more.

Probably every of your home devices hasn't been updated for a number of years.

They were in Linux, whatever version, no automatic updates or anything like that.