Software Sharing Encrypted Documents Without Trusting Your Own Servers
Seven ways to store sensitive documents in a SaaS app so the owner can read them, share them, and revoke that share, compared against one question: what does an attacker with remote code execution on the API server walk away with?