[ethomson]

I agree, I'm happy to see more research here. For my uses, a filter based approach makes the most sense, though I can understand wanting a more holistic solution.

My needs are such that I might only want to encrypt a few files, and filters do an adequate job here. But I can understand a limitation where all objects must be encrypted, and thus filter perf is not appropriate.

Filters also have the limitation of leaking the commit and tree information, which may also be sensitive data on some projects.

This is an interesting strategy, and I'm glad to see more research done here, regardless.