|
|
|
|
|
by Kunix
3727 days ago
|
|
I would strongly recommend against using Seafile. Seafile stores a lot of metadata in clear text (including filenames): https://github.com/haiwen/seafile/issues/350 The developers know about it, the issue is 3 years old, this huge limitation is still not reflected on their documentation. An attacker who obtains a copy of the encrypted library without the key can:
- read the complete list of directory and file names.
- know the size of every file
- know which files share some of the same information
- see the history of who changed each file, when, and what byte ranges were altered
|
|