Giter Club home page Giter Club logo

Comments (8)

wangkesen avatar wangkesen commented on August 19, 2024 1

I don't think it's actually that big of deal if you do a good job at organization when you first create the vault got about 700GB oF data on the Webdav now and it isn't an issue. But when I just had one folder and threw all the files in together the vault would take forever to mount as well. Buy definitely better on the new pre release beta.

from cryptomator-ios.

monomadic avatar monomadic commented on August 19, 2024

I'd actually like for the option to allow for non-obfuscated filenames... I don't really care if people can read a filename, or if a cloud provider knows the filename of my files, especially if it gives me the ability to search.

Another idea though, that you may want to explore, is dumping the directory contents regularly to a text file, then searching the text file. Just open a shell and cd into your unencrypted filesystem (webdav share, this only works on desktop unfortunately). Then:

find . > dir.txt

Then you can either search by opening the text file in a text editor, or you can just:

cat dir.txt | grep <search term>

The value of piping to a text file is you can search the entire structure even when your vaults aren't open, and you can store it unencrypted in your dropbox and then dropbox's search mechanism will search inside the text file for you.

from cryptomator-ios.

tobihagemann avatar tobihagemann commented on August 19, 2024

Disabling filename encryption would affect the encryption scheme. We have a feature request and discussion open here: cryptomator/cryptomator#101

Let's say we would keep filename encryption enabled, your other suggestion would purposely leak encrypted information. πŸ˜„ That's contradictory to one of the goals of Cryptomator: Encrypt and obfuscate as much (meta)data as possible. That doesn't mean we're not open for changes. E.g., we dropped file size obfuscation some time ago, because the usability benefits overweighed the security concerns.

Reading my original post, I still think that there is no other way around than implementing some client-side solution. Maybe we could make it more effective by implementing it in all our apps (including desktop), so that the search index is saved as an encrypted metadata file. But as soon as you have files that can be concurrently written from different sources, you have to deal with synchronization conflicts.

from cryptomator-ios.

monomadic avatar monomadic commented on August 19, 2024

I agree, it leaks encrypted information, the filenames - and as I stated those aren't important (to me) if that information is public.. but I understand sometimes that's not the case. You could also store the txt file I mentioned above in your vault, and grep it but that doesn't really solve the problem entirely.

I think perhaps indexing the files might be more trouble than it's worth! especially on platforms where the filesystem is not local (eg. apps like cyberduck and the iOS app).

from cryptomator-ios.

ArtificialTruth avatar ArtificialTruth commented on August 19, 2024

I have been reading the discussions and new feature requests that has sprung out of this issue (cryptomator/cryptomator#336 cryptomator/cryptomator#101 cryptomator/cryptomator#620).
It seems first, we need to decide between 2 options:

  1. Use the cloud providers search tool (which is usually very good and getting better over time) and sacrifice a bit of privacy for usability by exposing filenames. This also opens up for easy use of the cloud providers versioning tools.
  2. Build our own search tool

If we go with 2), one could either:
a) Create a cloud encrypted index file (over folders and files) which is updated by all Cryptomator software as often as possible. Handling file/version conflicts should be equally difficult to handle as all the other files synchronized that can be accessed at the same time by Cryptomator software from different platforms, since the index file is only edited by Cryptomator.
b) Create a local index, which will be updated every time Cryptomator syncs.

Either way, I think searching is often what prevents people from switching to privacy minded software. For instance I switched to ProtonMail from Gmail, and the search function is missing email content search.

I put my hopes that you talented people will find a solution. Either way, I am happy for Cryptomator :)

from cryptomator-ios.

t0ma5 avatar t0ma5 commented on August 19, 2024

I think searching is often what prevents people from switching to privacy minded software. For instance I switched to ProtonMail from Gmail, and the search function is missing email content search.

That's exactly why I came to read this issue, I was trying to find how to search for files inside my vault, without it Cryptomator is not an option for me :(

from cryptomator-ios.

StanoRiga avatar StanoRiga commented on August 19, 2024
  1. Use the cloud providers search tool (which is usually very good and getting better over time) and sacrifice a bit of privacy for usability by exposing filenames. This also opens up for easy use of the cloud providers versioning tools.

For me (and I guess a lot of other users) it is not just a bit of privacy if filenames are exposed. This would mean the provider knows where I am insured, and against which risks (and against which not), where I am going to holidays (and which airline I prefer for example), if i have done my tax declaration (and since when I am doing this), and many many more sensitive information about me. Its not just "a bit" of privacy if one can read my file names.

from cryptomator-ios.

patrickwolf avatar patrickwolf commented on August 19, 2024

Yes I totally agree that is's not a bit of privacy I'm using Cryptomator because of the file name encryption (as i have already other means of encrypting file content through my backup program

from cryptomator-ios.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    πŸ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. πŸ“ŠπŸ“ˆπŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❀️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.