Client side encryption; Create encrypted vault interopable with Cryptomator

[cyberduck]

023e870 created the issue

Hi!

It would be great if the encryption of uploaded files could be done on the client side by CyberDuck, pros :

• more secure form the client point of view
• unload the server, the client do all the encryption task
• can be used with S3 compatible hosting platform that do not support server side encryption (like Ceph, and others)
• could be protocol agnostic

Questions :

• in the way the option could be enable or disable for each upload or sync, how to recognize encrypted and non encrypted files at the download time ? adding a .gpg suffix to all encrypted files could do the job.

Thanks for any further suggestions.

Cédric

[cyberduck]

023e870 commented

Maybe gpg is not the better choice to do it : third party software are needed and key management could be a pain for neophyte users. What about AES ?

[cyberduck]

023e870 commented

Hello David,

Is there any blue prints or any target about that ?

Thanks,

Cédric

[cyberduck]

@dkocher commented

Replying to [comment:3 dafresh]:

Hello David,

Is there any blue prints or any target about that ?

No, I have no immediate plans for this feature. Patches are welcome.

[cyberduck]

@dkocher commented

#8628 closed as duplicate.

[cyberduck]

f19f995 commented

is there any near future plans for client side encryption?

[cyberduck]

@dkocher commented

Replying to [comment:6 aivaras.sukackas]:

is there any near future plans for client side encryption?
No, this feature is not currently scheduled in a milestone.

[cyberduck]

@dkocher commented

• AWS Encryption SDK for Java

[cyberduck]

@dkocher commented

Milestone renamed

[cyberduck]

@dkocher commented

Our implementation will be based on and interoperable with Cryptomator.

[cyberduck]

@dkocher commented

Forthcoming documentation on this wiki page.

[cyberduck]

@dkocher commented

In between 280ed39 and 22814.

[cyberduck]

@dkocher commented

Milestone renamed

[cyberduck]

@dkocher commented

https://blog.cyberduck.io/2017/01/19/cryptomator/
You can give the Cryptomator vault support a try in the current beta builds.