I’d like to give my users some private network storage (private from me, ie. something encrypted at rest with keys that root cannot obtain).
Do you have any recommendations?
Ideally, it should be something where files are only decrypted on the client, but server-side decryption would be acceptable too as long as the server doesn’t save the decryption keys to disk.
Before someone suggests that, I know I could just put lucks-encrypted disk images on the NAS, but I’d like the whole thing to have decent performance (the idea is to allow people to store their photos/videos, so some may have several GB of files).
The first thing that pops into my paranoid brain is: How well do you trust these ‘users’? Personally, I would have to implicitly trust someone to be able to allow them even a few kb on my server.
IDK how much I’d trust them with tech stuff (not much, definitely). However I don’t see how encrypted storage may become an attack vector?
I mean, they could clog up the HDDs with crap, but they can already do that via non-encrypted network storage (and in several other ways).
Not an attack vector. I’m speaking more towards the content of what they will be storing on your server.
Can the hoster be liable for illegal content stored on their server if they have no way to decrypt the files?