Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

bewCloud doesn't offer any server-side or end-to-end encryption (only in the HTTPS/SSL sense, and that's from caddy in the recommended docker-compose.yml file).

I also created and maintain an open source end-to-end encrypted product, Budget Zen [1], and it's just a different kind of beast.

Applying either concept here would be very complicated and complex.

To get an idea, Nextcloud offers server-side encryption and end-to-end encryption add-ons (apps), but they often cause issues with data becoming irrecoverable [2] [3] or simply not being compatible with mobile/desktop apps or other plugins/apps. And they have many years, many people, and a lot of money to throw at the problem.

[1] https://budgetzen.net

[2] https://help.nextcloud.com/t/recover-encrypted-files-after-l...

[3] https://help.nextcloud.com/t/all-files-lost-after-encryption...



I like the current approach with focus on plain file sync and sharing. Keep it up!

I typically self host with full disk encryption which I trust more than application level encryptions. Guessing that works for most self hosters


Thanks!


Thank you for the thoughtful reply! Yeah, it is a very difficult problem, so I always hope there is somebody who will solve it for me.

I've been avoiding Nextcloud (because of their suggestion to run a Docker container with access to the Docker socket), so luckily I have not suffered any data loss, but I appreciate being informed of the risks there also.

Certainly having a targeted scope like on your other project helps reduce the complexity of the implementation and can turn it from unapproachable to viable.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: