Nextcloud Introducing Native Integrated End-to-end Encryption

[mannp]

No mention of CalDAV or CardDAV at all then, so an alpha ‘feature’

[Le_tols99]

Ich möchte nicht mehr Kontaktiert werden

[mannp]

@jospoortvliet ! have created a github issue on the assumption this is a bug.

[Therion7777]

@jospoortvliet

Will we see the .msi package for Windows Client?
It’s very important to maintance the client with AD environments

[Simon_Dad]

Very great news
A colleague spoke to me about the concept of “privacy by design”.
It is very interesting that only user can access its data.
Thanks a lot
When do you think it will be included by default ?

[jospoortvliet]

@mannp

I mean that CalDAV and CardDAV immediately do not work when the E2EE is enabled for my nextcloud.

My calendar errors out and cannot connect to the server.

As soon as I disable E2EE they connect and sync again fine.

With regard to their encryption, I could not disagree more. I believe its a challenge and not easy for sure, but in the age of GDPR, it is not something that should be dismissed so readily. Nor is a matter of what users ‘want’, its about what GDPR states in relation to keeping customer data safe.

@budy no misunderstanding here, just stating a fact in my case; CalDAV and CardDAV no longer sync with E2EE enabled.

Not the only one to have the effect either -> Nextcloud 12.03 End to End Encryption Testing?

the caldav & carddav disabling is a bug, that shouldn’t happen. @bjoern should probably know about this?!?

[jospoortvliet]

@Therion7777

Will we see the .msi package for Windows Client?

It’s very important to maintance the client with AD environments

I don’t know but if we create that it would probably be only for paying customers. Seems like a feature only really relevant for companies with larger number of users. If you need it and are a customer, contact sales/your account manager and ask about this!

[blu-IT]

Really awesome!
But files are not the only thing to encrypt: The next step should be to add e2e encryption to contacts and calendar, too! This also very private data…

I agree with rugk: Contacs & calendar, etc. are essential informations that should be enycrypted.
What about encrypting the database used by NC where these informations are stored? Is there a way to encrypt the complete databas (mysql, sqlite,…)?

Regards

[bjoern]

@jospoortvliet

the caldav & carddav disabling is a bug, that shouldn’t happen. @bjoern should probably know about this?!?

Yes, I’m aware of it. @mannp already created a bug report CardDAV and CalDAV stop working with E2EE enabled. · Issue #3 · nextcloud/end_to_end_encryption · GitHub and there is already a fix https://github.com/nextcloud/end_to_end_encryption/pull/4 waiting for review.

[bjoern]

@blu-IT

I agree with rugk: Contacs & calendar, etc. are essential informations that should be enycrypted.

As soon as CardDAV/CalDAV supports it we can think about it. Encrypting it server side adds a lot of complexity, increases the risk for additional bugs and doesn’t provide a significant security improvement.

[alfred]

Does the bug bounty program also apply to E2EE? Because of the importance and severity of this part of Nextcloud it should apply here as well. Maybe even more so than for everything else (which doesn’t mean other parts aren’t important too!), so upgrading the awards in this case money-wise wouldn’t be a bad idea.

I think a special competition (“Try to crack our client side encryption if you can!”) would be a good idea for this purpose too. Tresorit did this some time ago for example.

[jospoortvliet]

@alfred

I think a special competition (“Try to crack our client side encryption if you can!”) would be a good idea for this purpose too. Tresorit did this some time ago for example.

It would apply once this is final and part of Nc 13, yeah. And - good idea. @LukasReschke just a thought

[ggeorgg]

Not sure if this is the right place to ask but nevertheless:
This nice gif shows the nextcloud android app in which it is possible to encrypt data. Which version is it? I wanted to test this feature. Therefor I set up a new nextcloud 12.0.3 installation and manually copied the end-to-end encryption app to the app folder. I tried the latest android app from here on my android phone, but I can’t see the possibility to encrypt a folder. Is the feature deactivated?

Thanks a lot for your answer!

[alfred]

Seems to be not merged yet:

First release of E2E

You would have to build it yourself probably but a new release in the dev branch (last one is quite old now) with encryption support enabled would be great.

[jospoortvliet]

See the instructions in the blog. You have to join our beta program, THEN the alpha-testing-google-plus group and then you get a test build of the app

[alfred]

Would be awesome to have it in the Nextcloud Dev App on F-Droid as well. The last version there is quite old now, almost a month since the last release.

[neoencrypt]

Regarding the statement "The design supports a Hardware Security Module for enterprise environments which enables securely issuing new keys to users " , I am not clear on which keys/certificates are stored in the HSM ?

[tflidd]

Please don’t hijack announcement topics for you individual problems. Closing topic.