4 ms·
The state of things isn't great IMHO. Im not sure I trust any of EncFS, CryFS, and gocryptfs. Many leak metadata and/or have serious security concerns.
by jszymborski 11mo ago
The state of things isn't great IMHO. Im not sure I trust any of EncFS, CryFS, and gocryptfs.
Many leak metadata and/or have serious security concerns.
- karlgkk 11mo agoMetadata leakage is a fundamental issue when you go from block to object. I can think of some schemes that would help but they’re all kinda nasty lol
- jszymborski 11mo agoOf course, and I didnt intend to downplay the efforts of those projects. Just pointing out that they don't meet the requirements of most threat models.
- karlgkk 11mo agoI kinda gotta push back on that Most threat models don’t include state level or equally well funded/motivated actors. Some of those, in theory, are fine for most corporate usage - when used or implemented by knowledgeable people. Shipping it as a consumer product is a bit rougher of a story, although most companies seem to cope by not giving a shit (lol, oof)
- ysnp 11mo agoCan you detail the current metadata and security problems with CryFS? Do they also extend/apply to securefs?