This and the previous question raised by Sonali Jagdish about
client-side encryption is a good one. Here's what the ownCloud FAQ has
to say:
"ownCloud does not do client-side encryption because you can not have a
web interface if the server can't read the files and the web interface
(and sharing abilities!) are very central to ownCloud. So you will
always need to be able to trust the server if you want to 'own' your data."
So allow me to share with this list what I had to say on the
Authenticity Alliance list about those questions and the ownCloud response:
"*Using the browser, ie an outdoor billboard, as a bank branch or retail
store or private office or elementary school classroom is a design
atrocity. It is positively bizarre. You can be 100% sure that breaches
will become worse until some thought leader says, "shouldn't we be
looking for a secure multipurpose client to replace the browser?" *
Many assumptions behind the web+browser infrastructure are entirely
inappropriate for a world that calls for secure sharing of information,
retail transactions, and pretty much anything you wouldn't do on an
outdoor billboard.
If you're interested in helping us build a multipurpose client
("unbrowser") that will allow you to keep your own encryption keys at
the client end and which will use much of the same "rendering paint" and
UX tools as a browser, maintaining compatibility with ownCloud and other
applications, please be in touch with us.
Wes Kussmaul
On 04/08/2015 12:51 PM, Sonali Jagdish wrote:
hi,
Instead of using any of the encryption tools is there any way by
which we could modify the existing code to support client side
encryption because we are looking at modifying the source code to
support client side encryption.
Thank you
On Wed, Apr 8, 2015 at 10:02 PM, Henk <[email protected]
<mailto:[email protected]>> wrote:
Hi,
There are some free encrytion tools that can be used to
synchronize and encrypt ownCloud folders locally.
CryptSync is one of them. It uses 7-Zip and it creates 7-Zip files
that can even be openend easily when the encryption key is known.
Your non-encrypted files will be in a CryptSync folder and the
encrypted files will be in the folder synced by ownCloud.
Cloudfogger and Viivo can possibly be used as well. I would not
try Boxcryptor, because it damaged my Windows 7 Pro HDD encryption.
One year ago I tested these tools with Google Drive.
The ownCloud data files are in the path
../owncloud/data/"username"/files.
When the encryption app is "on", the encryprtion keys are in a
folder like ../owncloud/data/"username"/files_encryption.
Just look around there.
Henk
----- Original Message -----
*From:* Sonali Jagdish <mailto:[email protected]>
*To:* For users of ownCloud <mailto:[email protected]>
*Sent:* Wednesday, April 08, 2015 4:39 PM
*Subject:* Re: [owncloud-user] regarding owncloud encryption
could you please a suggest ways by which we can implement
encryption at the client side as in give client an option
whether to encrypt files or not?also that i wanted to know one
thing regarding server side encryption.When the sever chooses
the option of encrypting the clients data which file in the
owncloud core folder is actually called as i'm unable to trace
that
thank you
On Wed, Apr 8, 2015 at 7:33 PM, Daniel Molkentin
<[email protected] <mailto:[email protected]>> wrote:
On 08.04.2015 16:01, Sonali Jagdish wrote:
> Why is that encryption globally dirven in owncloud and not
> indiavidually driven as in why is there no provision for
client side
> encryption
>
https://owncloud.org/faq/#encryption2
HTH,
Daniel
--
www.owncloud.com <http://www.owncloud.com> - Your Data,
Your Cloud, Your Way!
ownCloud GmbH, GF: Markus Rex, Holger Dyroff
Schloßäckerstrasse 26a, 90443 Nürnberg, HRB 28050 (AG
Nürnberg)
_______________________________________________
User mailing list
[email protected] <mailto:[email protected]>
http://mailman.owncloud.org/mailman/listinfo/user
------------------------------------------------------------------------
_______________________________________________
User mailing list
[email protected] <mailto:[email protected]>
http://mailman.owncloud.org/mailman/listinfo/user
_______________________________________________
User mailing list
[email protected] <mailto:[email protected]>
http://mailman.owncloud.org/mailman/listinfo/user
_______________________________________________
User mailing list
[email protected]
http://mailman.owncloud.org/mailman/listinfo/user
--
Wes Kussmaul
The Authenticity Institute
738 Main Street
Waltham, MA 02451
office +1 781 790 1674
mobile +1 781 330 1881
“Try this fruit, and by the way if a bunch of people collectively calling
themselves Arthur Andersen signs something it’s the same as if a person named
Arthur Andersen signed it.”
- The Serpent
_______________________________________________
User mailing list
[email protected]
http://mailman.owncloud.org/mailman/listinfo/user
