[dcposch]

This is awesome. End-to-end encryption is the natural solution to the problem of universal surveillance as well as more mundane issues, like companies losing data and servers getting hacked. I think it's very elegant that one can build useful services with untrusted servers.

The algorithms for end-to-end encryption are there, but usability of actual implementations has been pretty terrible so far. For example, compare the usability of Gmail vs Thunderbird+Enigmail. Or compare the usability of Dropbox and Tarsnap. I've actually wondered why there isn't a good end-to-end encrypted Dropbox alternative that's remotely as easy to use. I hope this works out.

Beautiful, usable end-to-end encrypted software is the future. See, for example, Keybase, @moxie's Signal or Whatsapp. The only caveat is that writing secure software is really hard. I just made a disk42 account, but I'll treat it as a untrusted demo until it's had more test mileage and outside code review.

Also, curious:

* How do you detect changes in the synced folder?

* How do you do conflict resolution (if a file is edited simultaneously on two different client machines)?

* What algorithms, key sizes, etc do you use for the actual encryption?

[aw3c2]

See http://freeplant.gitbooks.io/seafile-server-manual/ and https://github.com/haiwen/seafile-docs , that's the software this provider uses.

[xnull2guest]

> End-to-end encryption is the natural solution to the problem of universal surveillance

Well, it's one small step at least. Surveillance can learn very large amounts from meta-data, file types and sizes, access and upload times, it doesn't prevent them from hacking into endpoints (noted as a popular tactic of the NSA), it doesn't fix the problem of NSL/financial/legal(CALEA etc) leverage to backdoor the systems or from insider attacks (look at what happened to Skype's E2E), nor does it account for compromised cryptographic standards (which is MUCH more complicated than which symmetric algorithm you pick to encrypt data).

> I'll treat it as a untrusted demo until it's had more test mileage and outside code review.

:D

Should be standard for crypto products. Glad to see it here.