search

privacytools / privacytools.io

🛡🛠 You are being watched. Protect your privacy against global mass surveillance.
https://www.privacyguides.org
Creative Commons Zero v1.0 Universal
3.11k stars 384 forks source link

🆕 Software Suggestion | Tresorit (file storage) #2032

Open udf2457 opened 4 years ago

udf2457 commented 4 years ago

Basic Information

Tresorit File Storage https://tresorit.com/

Description

Fantastic secure zero-knowledge file storage service based in Switzerland.

They also have a free, secure file sending service https://send.tresorit.com/

dngray commented 4 years ago

This would likely be relevant to https://github.com/privacytools/privacytools.io/pull/1713

udf2457 commented 4 years ago

As a side note, I did see that the prior attempt by someone else at listing Tresorit was closed in favour of Mozilla. Which struck me as odd because for starters Mozilla is very much US-based and no doubt uses US servers whilst Tresorit is 110% Swiss and uses servers in far more favourable jurisdiction.

subsys-R9boq8 commented 4 years ago

I did see that the prior attempt by someone else at listing Tresorit was closed in favour of Mozilla.

Probably because Firefox Send is FOSS/FLOSS and is self-host friendly?

And that reminded me of another similar FOSS ans self-host friendly file sharing program LUFI (Demo instance/Source code), which also encrypt files before upload (and of course, decrypt files after download) and embed decryption key in url.

udf2457 commented 4 years ago

Probably because Firefox Send is FOSS/FLOSS and is self-host friendly?

Still doesn't detract from the hard fact that they are a US organisation and their servers are largely US based.

You can't have it both ways. You can't rant on about "five eyes" and mass surveillance (https://www.privacytools.io/classic/) and yet only promote service options provided by US organisations.

subsys-R9boq8 commented 4 years ago

Still doesn't detract from the hard fact that they are a US organisation and their servers are largely US based.

Yeah if you're not satisfied with that you can just git clone and make your own instance in some country not included in the 5/9/14 eyes, that's my main reason to recommend FF send instead of Tresorit (though probably not very normal-user-friendly).

blacklight447 commented 4 years ago

Sseeing how Firefox Send is now dead, this seems like a reasonable service to include. Even if its closed source. Firefox send was browser encryption anyway, so it was always hard to trust the encryption if you didn't self host it. @privacytools/editorial

joshgrift commented 3 years ago

Tresorit is a software product. Wouldn't it make sense to include it under Cloud Storage? It's a very valuable alternative to iCloud, Dropbox, and GDrive. Since it's based in Switzerland and is end to end encrypted, I feel like it matches the criteria of privacytools.io very well.

lrq3000 commented 3 years ago

Can Tresorit be self-hosted? If not, that's likely the reason why it was not included on PTIO. If you notice, most sections only include self-hostable services, except of course for services where it's not possible or very impractical, eg, hosting.

joshgrift commented 3 years ago

It is not self hosted, but I do think that privacytools.io has lots of services that aren't self hosted though, such as their email provider list.

lrq3000 commented 3 years ago

Yes but as I said that's one of the few exceptions. It depends on the open-source offering. Currently Nextcloud is listed in cloud providers, which has lots of hosters for those who don't want to self-host, but are powered by an open-source and potentially self-hostable software for those who want maximum privacy (there are also other open-source candidates such as Duplicati and Peergos). For file sharing, there are much more flexible open-source solutions with unlimited file size (OnionShare, MuWire, Magic Wormhole, ShareDrop).

Note I'm not part of the PTIO team, the above reflect only my own opinion.