https://www.gcn.one/blog/ Notes on zero-knowledge storage, client-side encryption and verifiable infrastructure from the team building GCN.ONE. en Mon, 27 Jul 2026 09:00:00 +0000 https://www.gcn.one/blog/posts/why-we-judge-businesses-by-how-they-deliver.html https://www.gcn.one/blog/posts/why-we-judge-businesses-by-how-they-deliver.html Mon, 27 Jul 2026 09:00:00 +0000 Long before anyone reads the first page of a contract, they have formed an opinion about the organisation that sent it. Why the way sensitive information arrives became part of the message — and the design decision that follows from it. https://www.gcn.one/blog/posts/what-zero-knowledge-actually-means.html https://www.gcn.one/blog/posts/what-zero-knowledge-actually-means.html Thu, 16 Jul 2026 09:00:00 +0000 The phrase gets attached to products that still hold a copy of your key. Here is the concrete test we hold ourselves to: what a full dump of our database would reveal to an attacker who also owns every disk in the cluster. https://www.gcn.one/blog/posts/how-your-files-are-encrypted.html https://www.gcn.one/blog/posts/how-your-files-are-encrypted.html Thu, 09 Jul 2026 09:00:00 +0000 A walk through the upload pipeline: deriving keys with Argon2id, sealing content in 8 MiB XSalsa20-Poly1305 segments, and why the encrypted bytes travel straight to a storage node instead of through our API. https://www.gcn.one/blog/posts/why-we-publish-a-tamper-evident-audit-log.html https://www.gcn.one/blog/posts/why-we-publish-a-tamper-evident-audit-log.html Thu, 02 Jul 2026 09:00:00 +0000 Encryption stops us from reading your files. It does nothing to stop us from quietly rewriting the record of who touched them. So we chained the log with BLAKE3, anchored the roots to Bitcoin, and shipped the verifier as a separate program. https://www.gcn.one/blog/posts/what-gcn-one-is-and-why-we-built-it.html https://www.gcn.one/blog/posts/what-gcn-one-is-and-why-we-built-it.html Thu, 25 Jun 2026 09:00:00 +0000 The no-jargon introduction, written for the people who sign the contracts: what the service does, what a business would use it for, and the one question — who holds the keys? — that separates it from ordinary cloud storage.