4 ms·

Magic Wormhole gives you secure file transmission for free. Give one of the implementations a try: https://github.com/psanford/wormhole-william https://githu

by bhawks 2y ago

Magic Wormhole gives you secure file transmission for free. Give one of the implementations a try: https://github.com/psanford/wormhole-william https://github.com/psanford/wormhole-william

ryanianian 2y ago
Magic wormhole is great for live, peer-to-peer transfers. But it is not great if you want to distribute a file multiple times, asynchronously, or with other functionality gained from centralized storage. This is where people typically use email, dropbox, or perhaps the tool from TFA.
- nijave 2y ago
  I think you can seed torrents via HTTP but you'd want to add a layer of file encryption in case someone discovers your torrent Non-free Resilio Sync basically automated this
zikduruqe 2y ago
Why not S3 presigned URLs? It's already baked into the service anyways. https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareO...
- gregw2 2y ago
  I agree with other posters that long lived non-autorotating IAM/S3 secret keys are not a good idea. A common alternate approach is presigned URLs. And not just on S3. Google Cloud, Backblaze, Digital Ocean, Cloudflare, Azure all have this presigned URLs functionality too (I checked for the degree of lockin before I started using S3's presigned URLs in a set of bulk-data APIs at one place I've worked.) GCP: https://cloud.google.com/storage/docs/access-control/signed-urls https://cloud.google.com/storage/docs/access-control/signed-... Digital Ocean: https://docs.digitalocean.com/products/spaces/how-to/set-file-permissions/ https://docs.digitalocean.com/products/spaces/how-to/set-fil... Hetzner: https://docs.hetzner.com/storage/object-storage/faq/buckets-objects/ https://docs.hetzner.com/storage/object-storage/faq/buckets-... Backblaze: https://backblaze-prod.us.document360.io/apidocs/b2-get-download-authorization https://backblaze-prod.us.document360.io/apidocs/b2-get-down... Cloudflare R2: https://developers.cloudflare.com/r2/api/s3/presigned-urls/ https://developers.cloudflare.com/r2/api/s3/presigned-urls/ Azure: https://learn.microsoft.com/en-us/rest/api/storageservices/delegate-access-with-shared-access-signature https://learn.microsoft.com/en-us/rest/api/storageservices/d... etc. Also, presigned URLs can be used not just for downloading files with a temporary URL but can also be created for uploading files with a temporary URL.

by bhawks 2y ago

Magic Wormhole gives you secure file transmission for free. Give one of the implementations a try: https://github.com/psanford/wormhole-william https://github.com/psanford/wormhole-william

ryanianian 2y ago

Magic wormhole is great for live, peer-to-peer transfers. But it is not great if you want to distribute a file multiple times, asynchronously, or with other functionality gained from centralized storage. This is where people typically use email, dropbox, or perhaps the tool from TFA.

nijave 2y ago
I think you can seed torrents via HTTP but you'd want to add a layer of file encryption in case someone discovers your torrent Non-free Resilio Sync basically automated this

zikduruqe 2y ago

Why not S3 presigned URLs? It's already baked into the service anyways. https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareO...

gregw2 2y ago
I agree with other posters that long lived non-autorotating IAM/S3 secret keys are not a good idea. A common alternate approach is presigned URLs. And not just on S3. Google Cloud, Backblaze, Digital Ocean, Cloudflare, Azure all have this presigned URLs functionality too (I checked for the degree of lockin before I started using S3's presigned URLs in a set of bulk-data APIs at one place I've worked.) GCP: https://cloud.google.com/storage/docs/access-control/signed-urls https://cloud.google.com/storage/docs/access-control/signed-... Digital Ocean: https://docs.digitalocean.com/products/spaces/how-to/set-file-permissions/ https://docs.digitalocean.com/products/spaces/how-to/set-fil... Hetzner: https://docs.hetzner.com/storage/object-storage/faq/buckets-objects/ https://docs.hetzner.com/storage/object-storage/faq/buckets-... Backblaze: https://backblaze-prod.us.document360.io/apidocs/b2-get-download-authorization https://backblaze-prod.us.document360.io/apidocs/b2-get-down... Cloudflare R2: https://developers.cloudflare.com/r2/api/s3/presigned-urls/ https://developers.cloudflare.com/r2/api/s3/presigned-urls/ Azure: https://learn.microsoft.com/en-us/rest/api/storageservices/delegate-access-with-shared-access-signature https://learn.microsoft.com/en-us/rest/api/storageservices/d... etc. Also, presigned URLs can be used not just for downloading files with a temporary URL but can also be created for uploading files with a temporary URL.