Re: Double Key Encryption
Well, you kinda are: from a security standpoint, the Microsoft-controlled key is irrelevant and may as well not be there.
The only (nebulous) benefit is that if your key is compromised, MS may be able block access by withdrawing their key from the data set (aka dismounting the drive), but this could just as easily and safely be done by any means of taking the data store offline (or firewalling it to just your HQ).
Biting the hand that feeds IT
