Conversation

Notices

1. disroot (disroot@social.weho.st)'s status on Sunday, 03-Nov-2019 17:39:27 UTC disroot

   @witziege
   Our Privacy Policy is I think quite clear on this topic. It's actually being re-written as we speak to make it even more clear (should be out within a week).

   All your files stored on our nextcloud are encrypted with a key created based on your credentials. This means that unless we do MITM attak on you and get your credentials we cannot see the content of the files. However, contacts, calendars, circles, tasks are unencrypted so potentially we can read it.

   • disroot (disroot@social.weho.st)'s status on Sunday, 03-Nov-2019 17:40:28 UTC disroot

     in reply to

     @witziege
     In most other nextcloud instances out there, where server side encryption is not implemented, your files are stored unencrypted.

   • disroot (disroot@social.weho.st)'s status on Sunday, 03-Nov-2019 18:02:39 UTC disroot

     @witziege yes thats correct.

   • 👣 ghose [:mastodon:] (xosem@mstdn.io)'s status on Sunday, 03-Nov-2019 18:25:58 UTC 👣 ghose [:mastodon:]

     @witziege if you are worried you can always use client side encryption to secure your data.
     There're many alternatives available (from more manual and technical https://nuetzlich.net/gocryptfs/comparison/ to dedicated programs like ex. #cryptomator)

     Personally I use #gocryptfs, but just for one folder with personal data, synced on all my devices (ex. https://blog.xmgz.eu/gocryptfs-cifrar-nube/ )

     #privacy #encryption

     @disroot

     disroot and LEXO repeated this.