4 ms·
I would strongly recommend against using Seafile. Seafile stores a lot of metadata in clear text (including filenames): https://github.com/haiwen/seafile/issue
by Kunix 10y ago
I would strongly recommend against using Seafile.
Seafile stores a lot of metadata in clear text (including filenames): https://github.com/haiwen/seafile/issues/350 https://github.com/haiwen/seafile/issues/350
The developers know about it, the issue is 3 years old, this huge limitation is still not reflected on their documentation.
An attacker who obtains a copy of the encrypted library without the key can:
- read the complete list of directory and file names.
- know the size of every file
- know which files share some of the same information
- see the history of who changed each file, when, and what byte ranges were altered