3 ms·

I'm curious about encryption with this or any similar service. My understanding with NextCloud is it can be set up with encryption such that the server cannot a

I'm curious about encryption with this or any similar service. My understanding with NextCloud is it can be set up with encryption such that the server cannot access the data.

BrunoBernardino 2y ago
bewCloud doesn't offer any server-side or end-to-end encryption (only in the HTTPS/SSL sense, and that's from caddy in the recommended docker-compose.yml file). I also created and maintain an open source end-to-end encrypted product, Budget Zen [1], and it's just a different kind of beast. Applying either concept here would be very complicated and complex. To get an idea, Nextcloud offers server-side encryption and end-to-end encryption add-ons (apps), but they often cause issues with data becoming irrecoverable [2] [3] or simply not being compatible with mobile/desktop apps or other plugins/apps. And they have many years, many people, and a lot of money to throw at the problem. [1] https://budgetzen.net https://budgetzen.net [2] https://help.nextcloud.com/t/recover-encrypted-files-after-lost-config-php/73297 https://help.nextcloud.com/t/recover-encrypted-files-after-l... [3] https://help.nextcloud.com/t/all-files-lost-after-encryption/205135 https://help.nextcloud.com/t/all-files-lost-after-encryption...
- dallamaneni 2y ago
  I like the current approach with focus on plain file sync and sharing. Keep it up! I typically self host with full disk encryption which I trust more than application level encryptions. Guessing that works for most self hosters
  - BrunoBernardino 2y ago
    Thanks!
- plagiarist 2y ago
  Thank you for the thoughtful reply! Yeah, it is a very difficult problem, so I always hope there is somebody who will solve it for me. I've been avoiding Nextcloud (because of their suggestion to run a Docker container with access to the Docker socket), so luckily I have not suffered any data loss, but I appreciate being informed of the risks there also. Certainly having a targeted scope like on your other project helps reduce the complexity of the implementation and can turn it from unapproachable to viable.

I'm curious about encryption with this or any similar service. My understanding with NextCloud is it can be set up with encryption such that the server cannot access the data.

BrunoBernardino 2y ago

bewCloud doesn't offer any server-side or end-to-end encryption (only in the HTTPS/SSL sense, and that's from caddy in the recommended docker-compose.yml file). I also created and maintain an open source end-to-end encrypted product, Budget Zen [1], and it's just a different kind of beast. Applying either concept here would be very complicated and complex. To get an idea, Nextcloud offers server-side encryption and end-to-end encryption add-ons (apps), but they often cause issues with data becoming irrecoverable [2] [3] or simply not being compatible with mobile/desktop apps or other plugins/apps. And they have many years, many people, and a lot of money to throw at the problem. [1] https://budgetzen.net https://budgetzen.net [2] https://help.nextcloud.com/t/recover-encrypted-files-after-lost-config-php/73297 https://help.nextcloud.com/t/recover-encrypted-files-after-l... [3] https://help.nextcloud.com/t/all-files-lost-after-encryption/205135 https://help.nextcloud.com/t/all-files-lost-after-encryption...

dallamaneni 2y ago
I like the current approach with focus on plain file sync and sharing. Keep it up! I typically self host with full disk encryption which I trust more than application level encryptions. Guessing that works for most self hosters
- BrunoBernardino 2y ago
  Thanks!
plagiarist 2y ago
Thank you for the thoughtful reply! Yeah, it is a very difficult problem, so I always hope there is somebody who will solve it for me. I've been avoiding Nextcloud (because of their suggestion to run a Docker container with access to the Docker socket), so luckily I have not suffered any data loss, but I appreciate being informed of the risks there also. Certainly having a targeted scope like on your other project helps reduce the complexity of the implementation and can turn it from unapproachable to viable.