3
Encrypt Filenames SSE
Source: nextcloud/server#55393 · opened by @Toorero
Encrypt Filenames SSE: Currently, if you enable server-side encryption (SSE) and I suspect by extend end-to-end encryption (E2EE) names of files are *not* encrypted. I think this is a major oversight and should be fixed because filenames can give a lot of information about the content stored in a file. File names (and even folder names) can contain private and/or personal information, like names of persons, places bank accounts present, etc. Even highly sensitive data like gender or sexual orientation can be exposed via unencrypted filenames
No pledges yet. Be the first to back this.
Comments
Similar requests
Encrypted previews with server-side encryption (SSE)
11 votes · 0 comments
Post-Quantum Cryptography readiness: E2EE uses RSA-2048, SSE uses RSA-4096 — both quantum-vulnerable
0 votes · 0 comments
Exclude specific filenames and paths from the trash bin
4 votes · 0 comments
The Filter filenames input box is very hard to discover on mobile
0 votes · 0 comments
Allow combined UTF-8 characters for filenames on Nextcloud External local storage files
2 votes · 0 comments
No comments yet.