search

szabodanika / microbin

A secure, configurable file-sharing and URL shortening web app written in Rust.
https://microbin.eu
BSD 3-Clause "New" or "Revised" License
2.65k stars 163 forks source link

Encrypted pastas #98

Closed szabodanika closed 1 year ago

szabodanika commented 1 year ago

Currently there is no way to password protect your pastas. There should be a flag (e.g. --enable-encryption, since --private is taken, or perhaps make the existing private also enable password protection) that enables the end user to enter a password to encrypt their pasta using JS in the browser and send the encrypted data to MicroBin, then when MicroBin serves the encrypted data, it will prompt the user for a password and decrypt the content in the browser, again with JS. Ideally this should use no fancy libraries or anything, it must be as vanilla as possible, and security takes priority over speed when it comes to choosing algorithm.

Nirsi commented 1 year ago

I'm really looking forward to having e2e encrypted pastas, but I might suggest implementing it in such way that the key is encoded in the URL itself, that way it is 0 addition effort from the user and pastas are 100% secure and data are only between those that have the link

r3nor commented 1 year ago

I really like the animal names approach as it is pretty easy to write and use everywhere. It would be really awesome if we could keep that awesome feature while being able to encrypt. Maybe using the “animal names” as an encryption key?