Hi,
someone recently posted, that OC4 uses the user's password as a key for
file encryption.
I just tested it, and it's true. This means: as soon as someone changes
his password, he cannot access his files anymore!! This is a real
bad joke, IMO!
I don't know if this also applies to
I have a few questions regarding server-side encryption (you can think of
these also as ideas for improvement)
1) when does server-side encryption happen?
2) what happens to unencrypted files when i enable it?
3) what happens to the encrypted files when i disable the encryption app?
4) what happen
On 22.05.2012, at 11:33, Dirk Kastens wrote:
> Hi,
>
> someone recently posted, that OC4 uses the user's password as a key for file
> encryption.
>
> I just tested it, and it's true. This means: as soon as someone changes his
> password, he cannot access his files anymore!! This is a rea
Hi Frank,
ownCloud updates the encrypted key, which is used to encrypt the files,
every-time a user or admin changes the password. So password change is possible.
But this only works for local accounts at the moment and doesn´t work with ldap
users because we don´t get notification if a passwo
On 22.05.2012, at 11:58, Dirk Kastens wrote:
> Hi Frank,
>
>> ownCloud updates the encrypted key, which is used to encrypt the files,
>> every-time a user or admin changes the password. So password change is
>> possible.
>> But this only works for local accounts at the moment and doesn´t work
On Tuesday 22 May 2012 12:09:09 Frank Karlitschek wrote:
> On 22.05.2012, at 11:58, Dirk Kastens
wrote:
> > Hi Frank,
> >
> >> ownCloud updates the encrypted key, which is used to encrypt the files,
> >> every-time a user or admin changes the password. So password change is
> >> possible. But th
On 22 May 2012, at 11:20, Andreas Schneider wrote:
> It isn't tricky, secure server side encryption is simply not possible!
What about the case where you have multiple external storage points mounted
into your ownCloud. (It's not possible yet but) files would be encrypted on
your ownCloud server
1) You still have to trust the server where your ownCloud is running.
2) external storage is about the only valid point I see for using server
side encryption.
3) If someone has a solution for client side encryption which doesn't
break WebDAV and/or browser access to the files, I'd really like to h
It isn't tricky, secure server side encryption is simply not possible!
You always have to trust your admin. ;-)
I'm using an external file server as the OC data storage. Server side
encryption would make the storage more secure, because someone who gets
access to the file server will not be ab
You always have to trust your admin. ;-)
With ZeroBin [1] you don't even have to trust your admin, but I'm not
sure if that model of client-side encryption is appliable to ownCloud...
[1] http://sebsauvage.net/wiki/doku.php?id=php:zerobin
I'm using an external file server as the OC data sto
On Tue, 2012-05-22 at 12:53 +0200, Florian Hülsmann wrote:
> With ZeroBin [1] you don't even have to trust your admin, but I'm not
> sure if that model of client-side encryption is appliable to
> ownCloud...
ownCloud needs to be able to handle large file uploads / downloads, work
well on mobile
On Tuesday 22 May 2012 12:16:21 Sam Tuke wrote:
> ownCloud needs to be able to handle large file uploads / downloads, work
> well on mobile devices, and be bandwidth efficient. As far as I can see
> using client-side JS based encryption would conflict with these needs.
client-side JS based encrypt
I'm confident about this encryption, but sure it's true that the admin
can see the files - while they are decrypted. And I don't know about
you, but I rather do something else then spending time waiting for
users to login and then get their files. Still, this function makes it
more secure then
On 22/05/2012 12:20 μμ, Andreas Schneider wrote:
[...]
If you encrypt and decrypt on the server there is no real security at all. The
admin/person having full access to the machine will always have a way to get
the encryption password.
Indeed. What needs to be clarified here is what the threat
Am Dienstag, 22. Mai 2012, 12:53:12 schrieb Florian Hülsmann:
> > You always have to trust your admin. ;-)
>
> With ZeroBin [1] you don't even have to trust your admin, but I'm not
> sure if that model of client-side encryption is appliable to ownCloud...
>
> [1] http://sebsauvage.net/wiki/doku.p
Hi,
you might also have a look at wuala.com. they have been the first which
encrypted cloud storage.
they do - afaik - a client-side encryption and have their src partially opened,
developed at ETH zürich.
Sounds good. Thanks for the hint.
So it seems that encryption is not very well implem
Can anyone answer that question? I'd really be interested.
Daniel
On 05/22/2012 09:07 PM, Aggelos Economopoulos wrote:
> What needs to be clarified here is what the threat model is. What does
> this encryption scheme try to protect against?
___
Owncloud
Am Mittwoch, den 23.05.2012, 09:39 +0200 schrieb Daniel Danger:
> Can anyone answer that question? I'd really be interested.
>
> On 05/22/2012 09:07 PM, Aggelos Economopoulos wrote:
> > What needs to be clarified here is what the threat model is. What does
> > this encryption scheme try to protec
On 25/05/2012 08:47 πμ, Sven Radde wrote:
Am Mittwoch, den 23.05.2012, 09:39 +0200 schrieb Daniel Danger:
Can anyone answer that question? I'd really be interested.
On 05/22/2012 09:07 PM, Aggelos Economopoulos wrote:
What needs to be clarified here is what the threat model is. What does
this
Am 28.05.2012 22:43, schrieb Aggelos Economopoulos:
> True enough, but let's give people the benefit of the doubt here.
To be sure, no destructivism was intended.
Quite to the contrary, I'd definitely be willing to contribute to both a
discussion about the threat model and the implementation of a s
hi, is it possible to encrypt a connection with ssl usingthe ownCloud
2012 Linux Client 1.0.3?
best regards steven
___
Owncloud mailing list
Owncloud@kde.org
https://mail.kde.org/mailman/listinfo/owncloud
Am 22.10.2012 um 06:04 schrieb Martin Kollek:
> Hey Everyone,
hi!
> I have a question about the security.
>
> I know there is an app in the settings where i can turn on Encryption but i
> dont know what it does.
As far as I know, this app does file encryption on the server. f.e
Hi,
can someone explain me how the encryption password recovery works?
What are the steps to get it to work?
At first, the admin has to enable the encryption passwords recovery key,
right? Then a user has to enable password recovery by sharing all files
with the administrator. But then, how can
Hi,
I was in the process of testing out encryption and versioning for a client
that wanted a Dropbox replacement. I'm using owncloud 4.0.4 with encryption
enabled.
I shared a folder with a group and the contents of the folder are still
encrypted to other users. When I log in from my account,
On 18.07.2012 08:40, Steven Ulrich wrote:
hi, is it possible to encrypt a connection with ssl usingthe ownCloud
2012 Linux Client 1.0.3?
Yes, just specify your ownCloud url as https://myowncloud.bla.foo/, mind
the 's' ;-)
klaas
___
Owncloud mailing
Hallo Klaas, hello Steven,
> On 18.07.2012 08:40, Steven Ulrich wrote:
> > hi, is it possible to encrypt a connection with ssl usingthe ownCloud
> > 2012 Linux Client 1.0.3?
On Wednesday 18 July 2012 11:42:21 Klaas Freitag wrote:
> Yes, just specify your ownCloud url as https://myowncloud.bla.fo
On 18.07.2012 12:33, Christian Reiner wrote:
Hallo Klaas, hello Steven,
On 18.07.2012 08:40, Steven Ulrich wrote:
hi, is it possible to encrypt a connection with ssl usingthe ownCloud
2012 Linux Client 1.0.3?
On Wednesday 18 July 2012 11:42:21 Klaas Freitag wrote:
Yes, just specify your own
Hello Klaas,
> >> On 18.07.2012 08:40, Steven Ulrich wrote:
> >>> hi, is it possible to encrypt a connection with ssl usingthe ownCloud
> >>> 2012 Linux Client 1.0.3?
> > On Wednesday 18 July 2012 11:42:21 Klaas Freitag wrote:
> >> Yes, just specify your ownCloud url as https://myowncloud.bla.fo
On 18.07.2012 08:40, Steven Ulrich wrote:
hi, is it possible to encrypt a connection with ssl usingthe ownCloud
2012 Linux Client 1.0.3?
On Wednesday 18 July 2012 11:42:21 Klaas Freitag wrote:
Yes, just specify your ownCloud url ashttps://myowncloud.bla.foo/, mind
the 's'
Christian Reiner wrot
Hello,
I have recently set up a private ownCloud instance and enabled the
encryption app. This worked fine until I think the 4.0.3 update a few
weeks ago. From then, all encrypted files which are downloaded contain
merely random data; it looks like they're still encrypted. Unencrypted
files (
Hi all,I'm really excited about the new encryption feature in OC 5. As far as I understand, encryption will not be part of OC 5 in the beginning but will be added later, correct? Any thoughts when encryption will be available?For me two things where missing when using encryption in OC 4.x (in addit
Hi,
Than the user who wants to use this feature has to enable it in his
personal settings "Enable password recovery by sharing all files with
your administrator".
Now if the user loses his password the admin can go to the user
management, enter the recovery password and than set a new password
Hello All,
I am in the same dilemma as Andreas. I had all my files and my wifes
files (separate accounts) encrypted in owncloud. Things were working
well. The server was acting up so I decided to reinstall to a fresh
Ubunut 12.04LTS. I had my owncloud/data/ on a separate partition on a
RA
On Wednesday 08 August 2012 07:32:33 ni...@niazyselim.net wrote:
> Hello All,
>
> I am in the same dilemma as Andreas. I had all my files and my wifes
> files (separate accounts) encrypted in owncloud. Things were working
> well. The server was acting up so I decided to reinstall to a fresh
> Ubun
Robin
Thank you very much for your reply and for the script. I will try it tomorrow
and let you know.
While we are at it, I have a question. Is the encryption against the plan
user's password? Meaning, is it important to keep the encryption.key file in a
safe place?
Again, thank you very much f
On Wednesday 08 August 2012 22:39:53 Niazy Selim wrote:
> Robin
>
> Thank you very much for your reply and for the script. I will try it
> tomorrow and let you know. While we are at it, I have a question. Is the
> encryption against the plan user's password? Meaning, is it important to
> keep the
Got it. Thank you.
Sent from my Galaxy S®IIIRobin Appelman wrote:On
Wednesday 08 August 2012 22:39:53 Niazy Selim wrote:
> Robin
>
> Thank you very much for your reply and for the script. I will try it
> tomorrow and let you know. While we are at it, I have a question. Is the
> encryption agai
Robin
YOU ARE THE BEST!!!
You were absolutely correct. Once I ran you script, I was able to
access all the encrypted files. Thank you, Thank you, Thank you!!
Niazy
Quoting Robin Appelman :
On Wednesday 08 August 2012 07:32:33 ni...@niazyselim.net wrote:
Hello All,
I am in the same
Hello,
thanks for your effort. Unfortunately this doesn't help in my case. I
took a look at the database, namely the table oc_fscache, and the
'encrypted' column is correct. Files still are not readable after
running your script :-(
Since I have the key file and the password, is there any ch
I was reading up on using ecryptfs to encrypt some of my files in my
~./owncloud foulder mounted with webdav. It turns out there is a bug lurking
around that might make it impossible for now:
https://bugs.launchpad.net/ecryptfs/+bug/277578
I also came across a nice article on how ecryptfs works
Hi Henning,
unfortunately we don't have a real schedule yet.
But it will be a matter of weeks and not month :-)
Your first point will be addressed.
The second point is no possible at the moment. This would be an admin backdoor
which is just he opposite of what we wan to have with this feature. M
On 03/12/2013 03:32 PM, Henning Schuster wrote:
> Hi all,
>
> I'm really excited about the new encryption feature in OC 5. As far as I
Hi! I was wondering since i seen the encryption feature on the list :
what it is supposed to be encrypted and why? (beside https which is obvious)
Because, with th
Adrian Sevcenco wrote:
> what it is supposed to be encrypted and why? (beside https which is
> obvious) Because, with the exception of encrypting files on the
> client (one by one before getting uploaded), i see no point of
> encrypting anything .. so i ask in order to educate myself :)
Adrian:
On 03/13/2013 12:22 AM, Andrew Warren wrote:
> Adrian Sevcenco wrote:
>
>> what it is supposed to be encrypted and why? (beside https which
>> is obvious) Because, with the exception of encrypting files on the
>> client (one by one before getting uploaded), i see no point of
>> encrypting anythi
Am 13.03.2013 07:27, schrieb Adrian Sevcenco:
>
>> Encrypting files on the server is definitely less secure than
>> client-side encryption in some scenarios ...
>> The thing is that i would be interested in encryption but i found no
>> solution so far .. but maybe more brains can find one :D
See ht
On 03/13/2013 09:09 AM, Thomas Gries wrote:
> Am 13.03.2013 07:27, schrieb Adrian Sevcenco:
>>
>>> Encrypting files on the server is definitely less secure than
>>> client-side encryption in some scenarios ...
>>> The thing is that i would be interested in encryption but i found no
>>> solution so
On 13 March 2013 08:20, Adrian Sevcenco wrote:
> On 03/13/2013 09:09 AM, Thomas Gries wrote:
>> Am 13.03.2013 07:27, schrieb Adrian Sevcenco:
>>>
Encrypting files on the server is definitely less secure than
client-side encryption in some scenarios ...
The thing is that i would be i
On 13/03/2013 09:17, Saint Germain wrote:
The free backup softwares tahoe-LAFS and Obnam are currently using
client-side encryption with deduplication.
Tahoe-lafs seems like an good fit for owncloud? I see it was rejected in
the past, any reason why?
Ed W
___
On Wed, 13 Mar 2013 22:34:41 +, Ed W wrote :
> On 13/03/2013 09:17, Saint Germain wrote:
>
> > The free backup softwares tahoe-LAFS and Obnam are currently using
> > client-side encryption with deduplication.
>
> Tahoe-lafs seems like an good fit for owncloud? I see it was rejected
> in the
Accidentially hit ctrl+enter, sry.
[...] That is why I was looking for an implementation in php so users could
access their files through the web interface or via webdav, while the internal
implementation worked like ecryptfs.
Any thoughts?
so long and have a hot and sunny weekend!
Jörn
--
Hi Jörn,
On Sun, 19 Aug 2012 13:55:05 +0200 Jörn Friedrich Dreyer wrote:
> I was reading up on using ecryptfs to encrypt some of my files in my
> ~./owncloud foulder mounted with webdav. It turns out there is a bug
> lurking around that might make it impossible for now:
> https://bugs.launchpad.
Hi,
That sound lovely!
Vänlig hälsning / Yours sincerely,
Daniel Holm
IT Consultant
Web Developer
Student, Enviromental Political Science
Tel: +46 76-1650946
ad...@danielholm.se
http://www.danielholm.se
Den mån 20 aug 2012 11:22:47 skrev Bjoern Schiessle:
Hi Jörn,
On Sun, 19 Aug 2012 1
> Hello mailing list,
>
> I have an OC installation running on a shared server. This is version 5.0.10,
> and PHP is 5.3.8.
>
> I noticed that, despite me activating encryption, my files are still stored
> as plaintext, as seen in the FTP. In owncloud.log, in /data/, I can see the
> followin
>
>
> Hello mailing list,
>
> I have an OC installation running on a shared server. This is version 5.0.10,
> and PHP is 5.3.8.
>
> I noticed that, despite me activating encryption, my files are still stored
> as plaintext, as seen in the FTP. In owncloud.log, in /data/, I can see the
> fol
Hello mailing list,
I have an OC installation running on a shared server. This is version 5.0.10,
and PHP is 5.3.8.
I noticed that, despite me activating encryption, my files are still stored as
plaintext, as seen in the FTP. In owncloud.log, in /data/, I can see the
following, relating to en
Hello everybody,
We have two questions about ownCloud.
First, we would like to know what about the server based encryption
option. In our ownCloud, the "Encryption" App has no effect. The files
are still uncrypted in the filesystem.
Second Point is a feature wish: Is there a possibility righ
Hello,
First of all, thank you for your work on this tool.
I'm new in using Owncloud and on this list, so forgive me if I'm not the
right place to ask my question and tell me where i do.
I try to set up the encryption file extension with the use of an LDAP
directory in owncloud v5. All works
Hi,
> Is there a platform where I can upload my feature wishes?
yes. The bugtracker over at github is the best place for this:
https://github.com/owncloud/core/issues
--
View this message in context:
http://owncloud.10557.n7.nabble.com/Questions-about-ownCloud-Encryption-Feature-Requ
://github.com/owncloud/core/issues
--
View this message in context:
http://owncloud.10557.n7.nabble.com/Questions-about-ownCloud-Encryption-Feature-Request-Wish-tp10541p10551.html
Sent from the ownCloud mailing list archive at Nabble.com.
___
Owncloud mailing
ud.10557.n7.nabble.com/Questions-about-ownCloud-Encryption-Feature-Request-Wish-tp10541p10560.html
Sent from the ownCloud mailing list archive at Nabble.com.
___
Owncloud mailing list
Owncloud@kde.org
https://mail.kde.org/mailman/listinfo/owncloud
Hello Martin,
On Fri, 23 Aug 2013 18:10:32 +0200 Martin Flamm wrote:
> First, we would like to know what about the server based encryption
> option. In our ownCloud, the "Encryption" App has no effect. The
> files are still uncrypted in the filesystem.
If the encryption app is enabled ownCloud w
Am 27.08.2013 19:42, schrieb Bjoern Schiessle:
> Hello Martin,
>
> On Fri, 23 Aug 2013 18:10:32 +0200 Martin Flamm wrote:
>> First, we would like to know what about the server based encryption
>> option. In our ownCloud, the "Encryption" App has no effect. The
>> files are still uncrypted in the f
On Wed, 28 Aug 2013 08:36:11 +0200 Thomas Gries wrote:
> Am 27.08.2013 19:42, schrieb Bjoern Schiessle:
>
> > On Fri, 23 Aug 2013 18:10:32 +0200 Martin Flamm wrote:
> >> First, we would like to know what about the server based
> >> encryption option. In our ownCloud, the "Encryption" App has no
> >
Am 28.08.2013 14:25, schrieb Bjoern Schiessle:
> Actually both are correct ;-)
> With "all your files" I meant all files in your files-folder, so
> basically all files the files app expose to you. The meta-data listed
> in the documents will not be encrypted. Deleted files and versions
> created a
Hi,
it seems that encryption doesn't work with http basic auth.
If I use http basic auth with the same credentials as the owncloud
user/pass and if I enable the encryption module, I get messages that
encryption is turned on, but I should log off and on again to start
encryption. I did this se
Was the desktop app previously setup connecting to a differebt server or
older version of owncloud? I found that this happened in that case.
Uninstall and install freah synck client. Make sure all files get deleted
during install.
On Aug 4, 2013 7:58 AM, "Adiczion (Christophe)" wrote:
> Hello,
>
Yes it was previously connected to another server (in the same version),
but before to connect to this server i have removed my local dir.
(.local/share/data/ownCloud), i have forgotten somethings ?
Le 04/08/2013 20:23, Derek Broes a écrit :
Was the desktop app previously setup connecting to
67 matches
Mail list logo
