core
core copied to clipboard
owncloud
Remove encryption enablement from Admin UI
ownCloud Admin UI allows "enable server side encryption" with one click. This motivates people to try out this option and after a week they do realize the challenges ... We should remove the option and allow this via OCC only.
via OCC only
This makes it impossible to enable on shared hosters where people might not have access to the CLI. Often times this is the situation where people do not trusted their shared hosters and do want encryption enabled.
Alternative: Encryption App only in marketplace ... need to check for migration ... in any case we need to prevent more people not understanding the consequences to switch this on ...
Enabling encryption itself isn't really a problem as it doesn't do anything at first. It's when enabling the user-key encryption module that stuff starts to happen.
We already put "master key" at the top of that one.
Hey, this issue has been closed because the label status/STALE is set and there were no updates for 7 days. Feel free to reopen this issue if you deem it appropriate.
(This is an automated comment from GitMate.io.)
Hey, this issue has been closed because the label status/STALE is set and there were no updates for 7 days. Feel free to reopen this issue if you deem it appropriate.
(This is an automated comment from GitMate.io.)
Hey, this issue has been closed because the label status/STALE is set and there were no updates for 7 days. Feel free to reopen this issue if you deem it appropriate.
(This is an automated comment from GitMate.io.)
reopening - discussion have been that we might require cli access for proper shared hosting of ownCloud
for gitmate, shall we disable auto-closing "discussions" ?
considering that only master-key will be provided in the future, enabling this by click isn't ask risky since decrypting will be easier.
but considering that decrypting is only possible on the CLI, maybe it does make sense to remove encryption enablement from the UI...
This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 10 days if no further activity occurs. Thank you for your contributions.
![stale[bot] avatar](https://avatars.githubusercontent.com/in/1724?v=4 "Published by a pub.dev verified publisher"){kind=small}
IMO at least add an "are you sure" dialog when changing the encryption on/off setting in the webUI, and have some explanation in the dialog. And maybe that would be a good time to remove user-key encryption as an option in the webUI - display the state if it is already on, but do not let people select and turn it on from the webUI.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 10 days if no further activity occurs. Thank you for your contributions.
![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "Published by a pub.dev verified publisher"){kind=small}
Also see https://github.com/owncloud/encryption/issues/327 and https://github.com/owncloud/enterprise/issues/5038
This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 10 days if no further activity occurs. Thank you for your contributions.