Hrunting Johnson

@askgh Read the EncFS security audit. The known security issue related to the configuration file is that an adversary can disable the validation of MACs, allowing them to overwrite ciphertext...

Now with version 2023.12.0, it also seems to be ignoring the excluded domain list. The site that I was having this problem with was in my excluded domain list, and...

This still appears to be an issue. Any progress on this? I cannot submit results either locally or through the web editor. On my local machine, it takes less than...

This happens because Blowfish is a legacy algorithm. OpenSSL 3.0 does not provide legacy algorithms by default anymore. For a workaround, you can add/update the following to your system-wide openssl.cnf...