{"id":4981,"date":"2020-09-27T10:13:50","date_gmt":"2020-09-26T21:13:50","guid":{"rendered":"https:\/\/kinetics.co.nz\/?p=4981"},"modified":"2020-09-27T10:13:50","modified_gmt":"2020-09-26T21:13:50","slug":"dke","status":"publish","type":"post","link":"https:\/\/new.kinetics.co.nz\/?p=4981","title":{"rendered":"What is Double Key Encryption and why should you care?"},"content":{"rendered":"\n[et_pb_section fb_built=&#8221;1&#8243; admin_label=&#8221;section&#8221; _builder_version=&#8221;3.22&#8243;][et_pb_row admin_label=&#8221;row&#8221; _builder_version=&#8221;3.25&#8243; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;3.25&#8243; custom_padding=&#8221;|||&#8221; custom_padding__hover=&#8221;|||&#8221;][et_pb_text admin_label=&#8221;Text&#8221; _builder_version=&#8221;4.9.1&#8243; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221; hover_enabled=&#8221;0&#8243; sticky_enabled=&#8221;0&#8243;]<h2><strong>Double Key Encryption (DKE) is coming soon to Microsoft 365 (E5 plans required)<\/strong><\/h2>\n<p>Like the name suggests, this is even MORE secure than the levels of encryption previously seen.\u00a0 Microsoft are saying that you need it if:<\/p>\n<ul>\n<li>You want to ensure that\u00a0only you\u00a0can ever decrypt protected content, under any circumstance.<\/li>\n<li>You don&#8217;t want Microsoft to have access to protected data on its own.<\/li>\n<li>You have regulatory requirements to hold keys within a geographical boundary. All of the keys that you hold for data encryption and decryption are maintained in your data center.<\/li>\n<\/ul>\n<p><a href=\"http:\/\/kinetics.co.nz\/wp-content\/uploads\/2020\/08\/Two-Keys.png\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-4985 alignright\" src=\"http:\/\/kinetics.co.nz\/wp-content\/uploads\/2020\/08\/Two-Keys.png\" alt=\"\" width=\"422\" height=\"241\" \/><\/a><\/p>\n<p>Basically, if you turn this on and apply it to your most sensitive data, then you will now need TWO security keys to access it.\u00a0 One key is held in the Microsoft Azure cloud and you hold the other.\u00a0 Because you hold one of the keys, even Microsoft can&#8217;t access your data.\u00a0 Who knows what happen when the FBI or whomever demand access to data in one of their investigations!<\/p>\n<p>We note that Double Key encryption is noted as being referenced in the (old) NZ Privacy Act 1993 although it isn&#8217;t apparent in the new 2020 act.<\/p>\n<p>DKE is setup as part of the 365 Admin Information Protection settings, and applies a new sensitivity label &#8220;Use Double Key Encryption&#8221;.\u00a0 We suggest using caution too!<\/p>\n<h2><strong>Reference<\/strong><\/h2>\n<p><a href=\"https:\/\/docs.microsoft.com\/en-us\/microsoft-365\/compliance\/double-key-encryption\" target=\"_blank\" rel=\"noopener\">https:\/\/docs.microsoft.com\/en-us\/microsoft-365\/compliance\/double-key-encryption<\/a><\/p>\n<p><a href=\"https:\/\/redmondmag.com\/articles\/2020\/07\/23\/double-key-encryption-for-microsoft-365.aspx\" target=\"_blank\" rel=\"noopener\">https:\/\/redmondmag.com\/articles\/2020\/07\/23\/double-key-encryption-for-microsoft-365.aspx<\/a><\/p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]\n","protected":false},"excerpt":{"rendered":"<p>Double Key Encryption (DKE) is coming soon to Microsoft 365 (E5 plans required) Like the name suggests, this is even MORE secure than the levels of encryption previously seen.\u00a0 Microsoft are saying that you need it if: You want to ensure that\u00a0only you\u00a0can ever decrypt protected content, under any circumstance. You don&#8217;t want Microsoft to [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":4985,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"<h2><strong>[wow_colorme]Double Key Encryption (DKE) is coming soon to Microsoft 365 (E5 plans required)[\/wow_colorme]<\/strong><\/h2>\nLike the name suggests, this is even MORE secure than the levels of encryption previously seen.\u00a0 Microsoft are saying that you need it if:\n<ul>\n \t<li>You want to ensure that\u00a0only you\u00a0can ever decrypt protected content, under any circumstance.<\/li>\n \t<li>You don't want Microsoft to have access to protected data on its own.<\/li>\n \t<li>You have regulatory requirements to hold keys within a geographical boundary. All of the keys that you hold for data encryption and decryption are maintained in your data center.<\/li>\n<\/ul>\n[wow_spacing size=\"20px\"]<a href=\"http:\/\/mattp49.sg-host.com\/wp-content\/uploads\/2020\/08\/Two-Keys.png\"><img class=\"wp-image-4985 alignright\" src=\"http:\/\/mattp49.sg-host.com\/wp-content\/uploads\/2020\/08\/Two-Keys.png\" alt=\"\" width=\"422\" height=\"241\" \/><\/a>\n\nBasically, if you turn this on and apply it to your most sensitive data, then you will now need TWO security keys to access it.\u00a0 One key is held in the Microsoft Azure cloud and you hold the other.\u00a0 Because you hold one of the keys, even Microsoft can't access your data.\u00a0 Who knows what happen when the FBI or whomever demand access to data in one of their investigations!\n\nWe note that Double Key encryption is noted as being referenced in the (old) NZ Privacy Act 1993 although it isn't apparent in the new 2020 act.\n\nDKE is setup as part of the 365 Admin Information Protection settings, and applies a new sensitivity label \"Use Double Key Encryption\".\u00a0 We suggest using caution too!\n<h2><strong>[wow_colorme]Reference[\/wow_colorme]<\/strong><\/h2>\n[wow_colorme]\n\n<a href=\"https:\/\/docs.microsoft.com\/en-us\/microsoft-365\/compliance\/double-key-encryption\" target=\"_blank\" rel=\"noopener\">https:\/\/docs.microsoft.com\/en-us\/microsoft-365\/compliance\/double-key-encryption<\/a>\n\n<a href=\"https:\/\/redmondmag.com\/articles\/2020\/07\/23\/double-key-encryption-for-microsoft-365.aspx\" target=\"_blank\" rel=\"noopener\">https:\/\/redmondmag.com\/articles\/2020\/07\/23\/double-key-encryption-for-microsoft-365.aspx<\/a>\n\n[\/wow_colorme]","_et_gb_content_width":"","footnotes":""},"categories":[4,5],"tags":[],"class_list":["post-4981","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-security"],"_links":{"self":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/posts\/4981","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4981"}],"version-history":[{"count":0,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/posts\/4981\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/"}],"wp:attachment":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4981"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4981"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4981"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}