search

matteoserva / MegaFuse

MEGA client for linux, based on FUSE
Other
250 stars 80 forks source link

How secure is MegaFuse? #79

Open MeiRos opened 7 years ago

MeiRos commented 7 years ago

Is MegaFuse encrypting data before sending to Mega? If yes, how strong is the encryption? Sorry to bother you with my newbie questions, I just quite don't understand how mounting over the net works... Hopefully you have some time to share your knowledge. Thank You!

tYYGH commented 7 years ago

Hi MeiRos. While I do not have the answer to your question, I have an answer you might find interesting.

Although I have not checked, I’d not be surprised to see HTTPS being used, which would be quite secure. But regardless of how secure the transfer is (which depends on the protocol that Mega is actually using), there is one certainty: the files get stored at Mega.

As far as I am concerned, I do not trust Mega, nor do I trust any cloud storage provider.

Conclusion: do your own encryption before sending to Mega (or any other cloud provider), so that Mega can not itself see the contents of the files. If possible, make it so that it cannot even see the real names of the files.

My 2¢…

MeiRos commented 7 years ago

According to iftop it's HTTP. My uploads to Mega are 31.216.144.12:http

I've been member of the Mega few days, because they gave quite secure image of their service. (and I needed quite a lot free space) If I get it right, they use end-to-end data encryption. I don't know if it's https or something else. That's why I like to know if MegaFuse does the same.

Anyway, that's a really good point to do own encryption. That's the only way to know minimum level of encryption. Some times I'm doing it and some times not. Depending on how important I think my files are.