Hacker News Reader

I think it is unfair to extend this specific experience to all personal fileservers. And TBH, I think that encrypting the storage shouldn't be done on this level. Setting up the OS that runs owncloud to have encrypted data volumes is the better way. If encryption is needed at all for taht.

Transport encryption between the various devices and the fileserver is a must, however. But going beyond that is not something I would consider to be a good thing.

View on HN

In-transit encryption is a no-brainer.

The most secure (from a trust point of view, at least) method of encrypting file is obviously at rest, client-side.

Seafile uses that method, but fails on the implementation on some aspects.

"In-place" encryption versus "volume/disk" encryption both have major drawbacks and are hard to implement correctly.

In case of "in-place", the private key is a possible vulnerability (like leaving the key under the doormat).

In case of disk encryption, while it's mounted, it's worth nothing if (when) you are compromised.

Reply on news.ycombinator.com