4 ms·

OwnCloud looks pretty neat, but I do wish that it would support client-side encryption; I don't trust a machine I'm renting in a data centre any more than I do

by wtbob 12y ago

OwnCloud looks pretty neat, but I do wish that it would support client-side encryption; I don't trust a machine I'm renting in a data centre any more than I do Facebook or Google. I'm aware that there (sadly) aren't standards for browser-uploaded encrypted files, sharing encrypted files efficiently and so forth, so it's hardly their fault.

pjc50 12y ago
I think for this use case you'd keep the machine at home and reverse-proxy or VPN it to the outside world.
neoeldex 12y ago
Can you even trust a machine you built yourself, running at home? Not saying you're not right being wary, but who can you trust? Can you trust yourself?
- lukifer 12y ago
  Like so many things, security is a spectrum. Just because an intruder can break your window, doesn't mean you shouldn't lock your front door.
BetaMechazawa 12y ago
There is an encryption plugin that gets bundled with owncloud that allows you to encrypt the data stored on the server
ukigumo 12y ago
If your worry is with data at rest, then owncloud already supports it (http://doc.owncloud.org/server/7.0/user_manual/files/encryption.html http://doc.owncloud.org/server/7.0/user_manual/files/encrypt...). I host my servers with AWS so I use Gluster encrypted bricks with backups to a S3 bucket as well as the built-in encryption capability from Owncloud.
- edwintorok 12y ago
  SX has client-side encryption if you use the SX tools (sxcp) to upload/download your files to volumes that have encryption enabled: http://blog.skylable.com/2014/09/transparency-reports-server-side-encryption-the-placebo-of-privacy/ http://blog.skylable.com/2014/09/transparency-reports-server... Disclaimer: I'm a co-founder of Skylable
  - ukigumo 12y ago
    Looks very interesting, I'll have a better look at the product tonight.
- wtbob 12y ago
  Yeah, but: > You don’t have to do anything special, as it uses your ownCloud login as the password for your unique private encryption key. So the server can decrypt my files at will, since it has access to my plaintext password.
toggle 12y ago
They've said that they don't intend to support this because the web interface has features like previewing images and editing ODF docs. So, in order for that to work, the server has to be able to read the actual file. As others have pointed out, there's a plugin for encryption at rest, but that can be decrypted by the server. Sounds like client side encryption is a no-go for the time being.
naiyt 12y ago
Have you tried Seafile? It supports client side encryption.

by wtbob 12y ago

pjc50 12y ago

I think for this use case you'd keep the machine at home and reverse-proxy or VPN it to the outside world.

neoeldex 12y ago

Can you even trust a machine you built yourself, running at home? Not saying you're not right being wary, but who can you trust? Can you trust yourself?

lukifer 12y ago
Like so many things, security is a spectrum. Just because an intruder can break your window, doesn't mean you shouldn't lock your front door.

BetaMechazawa 12y ago

There is an encryption plugin that gets bundled with owncloud that allows you to encrypt the data stored on the server

ukigumo 12y ago

If your worry is with data at rest, then owncloud already supports it (http://doc.owncloud.org/server/7.0/user_manual/files/encryption.html http://doc.owncloud.org/server/7.0/user_manual/files/encrypt...). I host my servers with AWS so I use Gluster encrypted bricks with backups to a S3 bucket as well as the built-in encryption capability from Owncloud.

edwintorok 12y ago
SX has client-side encryption if you use the SX tools (sxcp) to upload/download your files to volumes that have encryption enabled: http://blog.skylable.com/2014/09/transparency-reports-server-side-encryption-the-placebo-of-privacy/ http://blog.skylable.com/2014/09/transparency-reports-server... Disclaimer: I'm a co-founder of Skylable
- ukigumo 12y ago
  Looks very interesting, I'll have a better look at the product tonight.
wtbob 12y ago
Yeah, but: > You don’t have to do anything special, as it uses your ownCloud login as the password for your unique private encryption key. So the server can decrypt my files at will, since it has access to my plaintext password.

toggle 12y ago

They've said that they don't intend to support this because the web interface has features like previewing images and editing ODF docs. So, in order for that to work, the server has to be able to read the actual file. As others have pointed out, there's a plugin for encryption at rest, but that can be decrypted by the server. Sounds like client side encryption is a no-go for the time being.

naiyt 12y ago

Have you tried Seafile? It supports client side encryption.