freedomofpress / securedrop-signal-poc

prototype e2e server and source + journalist clients for securedrop
GNU General Public License v3.0
5 stars 3 forks source link

Allow larger file uploads? #20

Open zenmonkeykstop opened 3 years ago

zenmonkeykstop commented 3 years ago

Current SD has a hard limit of 500MB per submission. This is partly practical (because large uploads over Tor are gonna be slow) and a security decision (as large file uploads over Tor are/were unusual, making it easier for a passive observer to identify sources).

Anecdotally, sources may attempt to split larger files and upload them in pieces, but this is potentially error-prone. Also the second reason above may no longer be as valid given how folks use Tor now. It's worth investigating if larger file sizes are safe to send, and if there's anything to do to make large uploads easier (automating splitting files or supporting resuming partial uploads are two obvious examples)