search

oxzi / gosh

Authenticationless HTTP file upload server
GNU General Public License v3.0
16 stars 2 forks source link

Cryptostuff #4

Closed CryptoCopter closed 3 years ago

CryptoCopter commented 3 years ago

Implement encryption of data at rest.

When activated, an uploaded file will be chunked and encrypted with a randomly generated key. The key is encoded with the item id into the returned URL and never gets written anywhere to the host. Same goes for plaintext data. Also encrypt the filename, for good measure.

CryptoCopter commented 3 years ago

sure to all of that

CryptoCopter commented 3 years ago

So, is it okay like this?

oxzi commented 3 years ago

I pushed a fix for the golangci-lint action to the master branch. You might wanna rebase.

oxzi commented 3 years ago

Thanks again, @CryptoCopter!