Erik Taubeneck

hey @andrewsnowden sorry for the delay in reviewing this (and the other) PR(s). One concern I see here is when images are intentionally left out of the repository, uploaded to...

See the discussion [here](https://github.com/e-dard/flask-s3/issues/16) on using `recursive=True`. Also, see if [this](https://github.com/e-dard/flask-s3/pull/25) fixes the problem when they exist.

I'm not entirely sure that simply changing `recursive=False` as suggested in the PR will do the trick. If a bucket already exists, it is likely that you'd want to make...

1. It could be the case that there are files in S3 that aren't copied, but this is an edge case. I still think we should document it.  2. Yes,...

I think I understand what you are trying to accomplish. One solution would be to make `app1` and `app2` into Blueprints and setting their static folders manually. Otherwise, you can...

Following up from my comment on today's call, I wanted to call out that some timing information may leak from the encrypted reports. Here is an example attack with some...

Between @bedfordsean, @ajknox, and myself, we can make Mon: 3-3:30pm and 4-6pm GMT (8-9pm GMT, 2/3 of us) Tue: 3-3:30pm GMT Thanks for organizing @csharrison!

Thanks @csharrison for organizing! To clarify, from Nov 30 onward, do you intend to week weekly, or every 2 weeks (or some other cadence)?

I plan to add a few suggestions today. Will do so before noon (PT) so you can file the issue today, @erik-anderson.

I see three potential options: 1. Find some single trusted party which can manage these public/secret key pairs. 2. Spread the trust among multiple parties, which each manage part of...