service side encryption for local backend #118

New Issue

michael · 2026-01-19T18:29:02Z

michael commented

2026-01-19 18:29:02 +00:00

Originally created by @fnpanic on GitHub.

Hi,

it would be great to have server side encryption for localbackend by passing a password as a header and then encrypting it with AES. On download the password should be passed to the server.

The server itself das not store the passwords and so has encryption at rest.

Originally created by @fnpanic on GitHub. Hi, it would be great to have server side encryption for localbackend by passing a password as a header and then encrypting it with AES. On download the password should be passed to the server. The server itself das not store the passwords and so has encryption at rest.

michael closed this issue

2026-01-19 18:29:02 +00:00

michael commented

2026-01-19 18:29:03 +00:00

@fnpanic commented on GitHub:

@aspacca Thanks for your feedback! That is exactly what i was thinking about. The downsides are clear but it is really a good solution for encryption at rest.

Any chance to get this merged?

@fnpanic commented on GitHub: @aspacca Thanks for your feedback! That is exactly what i was thinking about. The downsides are clear but it is really a good solution for encryption at rest. Any chance to get this merged?

michael commented

2026-01-19 18:29:03 +00:00

@paolafrancesca commented on GitHub:

I forgot: you can achieve the same goal with https://github.com/dutchcoders/transfer.sh#encrypt--upload

@paolafrancesca commented on GitHub: I forgot: you can achieve the same goal with https://github.com/dutchcoders/transfer.sh#encrypt--upload

michael commented

2026-01-19 18:29:03 +00:00

@fnpanic commented on GitHub:

Yes it does but if you download it form a windows box it is not very easy to decrypt it on the fly. That is why i think your patch is a great fit here.

@fnpanic commented on GitHub: Yes it does but if you download it form a windows box it is not very easy to decrypt it on the fly. That is why i think your patch is a great fit here.

michael commented

2026-01-19 18:29:03 +00:00

@paolafrancesca commented on GitHub:

hi @fnpanic

there is still open a PR I worked on long time ago: https://github.com/dutchcoders/transfer.sh/pull/162

there are some concerns having the encryption on server side since you have to trust the server obviously.

@paolafrancesca commented on GitHub: hi @fnpanic there is still open a PR I worked on long time ago: https://github.com/dutchcoders/transfer.sh/pull/162 there are some concerns having the encryption on server side since you have to trust the server obviously.

michael commented

2026-01-19 18:29:03 +00:00

@paolafrancesca commented on GitHub:

@fnpanic revamped it

but I can see this: https://github.com/golang/go/issues/44226

@stefanbenten what do you think?

@paolafrancesca commented on GitHub: @fnpanic revamped it but I can see this: https://github.com/golang/go/issues/44226 @stefanbenten what do you think?

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: dutchcoders/transfer.sh#118