Is the cloud really secure? Richard chats with Orin Thomas about his work developing a doctoral thesis on cloud security. Recognizing that security at this level is less about products and more about principles, Orin digs into thoughts around encryption, physical security, breach identification and more. Inevitably there are some references to particular tools like the Azure Key Vault, but the challenge is in evaluating a technology in the context of a broader principle. Lots of great thinking about security!