Encryption system using clients and untrusted servers

A method comprising:

• receiving, by a first computing device, an unencrypted asset;
• encrypting the unencrypted asset with an encryption key by the first computing device to create an encrypted asset;
• transmitting the encrypted asset and a first hash of the encryption key from the first computing device to an untrusted server via the Internet, wherein the first hash of the encryption key identifies the encrypted asset at the untrusted server;
• generating a uniform resource identifier by the first computing device, the uniform resource identifier including the encryption key and identifying the untrusted server as storing the encrypted asset;
• transmitting the uniform resource identifier including the encryption key to a second computing device, thereby allowing the second computing device to access the encrypted asset by providing the untrusted server identified in the uniform resource identifier with a second hash of the encryption key to access the encrypted asset without providing the untrusted server with an unhashed version of the encryption key or the unencrypted asset,
• wherein the encryption key is included in the uniform resource identifier as an anchor, thereby causing the second computing device to exclude the anchor from a request to access the encrypted asset made to the untrusted server by the second computing device.