oohnoitz / jii

file sharing web server
https://0x0.pt
MIT License
37 stars 4 forks source link

secure private uploads and downloads #8

Open oohnoitz opened 10 years ago

oohnoitz commented 10 years ago

The following would need to be implemented.

The general idea is to allow users to, in a sense, securely upload with a passphrase and cipher provided. Furthermore, the same information must be provided to retrieve the file from the server. If an invalid passphrase and cipher is provided, the download should be rendered useless. This would all be done with crypto-stream.js.

Note: The cipher and keyphrase will not be stored with the file. The only time it will be known by the server is during the upload process since the encryption is done server-side.