263 karma · joined May 13, 2013
https://objectivefs.com
Use a non-local encrypted filesystem per project to get the isolation and to avoid your local storage. Mount the project filesystem when needed, unmount it when done, and when not in use it is simply inaccessible to the laptop.
While any encrypted filesystem not stored on your laptop would work for this, ours[1] makes this workflow very easy.
"Minimal Latency Tunneling (MinimaLT) is a new network protocol that provides ubiquitous encryption for maximal confidentiality, including protecting packet headers. MinimaLT provides server and user authentication, extensive Denial-of-Service protections, and IP mobility while approaching perfect forward secrecy."
I wanted exactly that and built ObjectiveFS. You can try the free preview at https://objectivefs.com
If you want to mount an encrypted filesystem stored on S3, you might want to try ObjectiveFS. https://objectivefs.com