What resiliency and service levels are in your "cloud"?The ansar-cloud is currently in beta. For an initial period account resources will be constrained and the service will be available at no cost. This status will be reviewed at regular periods.
What personal data does this collect / need and where is it based?
Big questions and valid concerns. Suffice to say that I have worked under the GDPR and am reasonably
aware of the issues of service availability and data privacy.
As for:
Is that really wise in a corporate situation???doesnt involve any tricky configuration of network components or requests to network admins.
What's your liability cover if the network is breached due to your software or you decide to stop providing the "cloud"?
[/quote]
Further big questions that need to be asked. I will try to keep this brief.
* resiliency - FSM-based network messaging, auto-session-recovery, auto-server-restarts
* what personal data - none. there is no validation of anything entered during signup. the email address is purely a unique id.
* where is it based - its currently in a US region of aws but there are no technical reasons for it to remain there
* is that really wise - not 100% clear on this, e.g. the technique used is already used by other services such as MQTT
* liability cover - i cannot answer legal questions mostly because i dont know and its probably different in every case
* if the network is breached - the issue of security is massive and never-ending. note again that nothing entered is validated.
* decide to stop - i have every intention of continuing. there are also contingency arrangements that could be made with interested parties.
Its difficult to provide much more than that within this context. I understand the issues you raise. Most of the
privacy issues are addressed by the lack validation of data entry during signup. The values are for your convenience.
Make them as readable/unreadable as you prefer. Messages are never stored. If there is sensitve information in
your messages then it is encrypted and remains in-flight. I look forward to the first PEN tests.
The security of the service looking to the future is dependent on the level of interest. I can fund it for a period
that allows evaluations. Beyond that there needs to be a different arrangement. Possibilities include the setup
of a non-profit organization to maintain the service at the lowest possible cost. I am also comfortable making
direct arrangements, i.e. users with commitments to the service can become their own providers. An instance
of the ansar-wan service can be installed within their own IAAS account. This is even a possibility for those users
with severe privacy concerns.
Statistics: Posted by mr-ansar — Tue May 28, 2024 10:47 pm