[webapp] Files/attachments are not encrypted

quarkslab / mattermost-plugin-e2ee

End-to-end encryption plugin for Mattermost

Apache License 2.0

67 stars 9 forks source link

[webapp] Files/attachments are not encrypted #7

Open aguinetqb opened 3 years ago

aguinetqb commented 3 years ago

Ticket to track ideas/advances on that known limitation.

Looks like using a combination of https://developers.mattermost.com/integrate/plugins/webapp/reference/#registerFilesWillUploadHook & https://developers.mattermost.com/integrate/plugins/webapp/reference/#registerFilesWillUploadHook could do the job. We will still have some limitations. For instance, Mattermost has an image preview feature which resize the image into a smaller one server-side, which obviously can't be done in our case!

feha commented 1 year ago

@aguinetqb what's the current status for this? And is it really only for the [webapp]? I were using the desktop version when uploading a test attachment, and it wasn't encrypted either.