Hacker News new | ask | show | jobs
by plasticsoprano 26 days ago
E2E is supported for specific types of folders available only to teams but the admin has to enable it and that folder has to be used. You can't apply it team wide to all users. It's a very poor implementation.
1 comments

If you want E2E, encrypt your data yourself. By far the simplest, safest solution to the problem.
Simplest? How so
Using `age` or `rage` is deadly easy. Also, e2e is most effective when it happens out of band - if the idea is "I don't trust Dropbox, so I want client side encryption" then you shouldn't trust them to do the e2e anyways. I realize it can be more complex, but managing it yourself gives you the maximal benefits of e2e.
I agree if you care about security it's better to DIY, it's just not simpler than say putting a file in Proton Drive
It's not just "better", it's the only approach that addresses the real threat model. So you can go with something simpler like checking a box but then you aren't getting the same feature.

FWIW this is the reason, to my understanding, that Dropbox has always been reluctant to support this feature - because if you actually want E2E you probably want it out of band.