search

cryptomator / cli

Cryptomator Command-Line Interface
GNU Affero General Public License v3.0
279 stars 41 forks source link

How much closer is this to being “ready?” #66

Open muxketeer opened 2 weeks ago

muxketeer commented 2 weeks ago

I know the front page says this is just in an experiment phase. But I’m wondering how close it is to ready? And how much risk am I taking, in my homelab, by using this to access my crytometer vaults? Is this project aiming to be secure? Is it already secure? If no, how insecure is it?

overheadhunter commented 1 week ago

It is not "insecure" in regards to encryption, as it uses the same implementation as the GUI app.

The warning refers to the fact that this is scarcely maintained and we don't have the capabilities to react to issues in what people may deem an acceptable response time.

Also it lacks some features, e.g. the ability to migrate vaults to newer formats or the integrity checker, which makes it depend on the GUI app if you plan to use it for long-term data storage.

So in terms of data security, you don't need to worry about the confidentiality but rather about the availability.