Encrypt Your Private Dropbox Data With EncFS | Hacker News Reader

Encrypt Your Private Dropbox Data With EncFS

webupd8.org

69 pointsmacco13 comments

This is better than TrueCrypt-on-Dropbox [1] in the sense that there's probably much less bandwidth inflation due to encryption, if any.

However, with EncFS be warned:

"Anyone having access to the source directory is able to see how many files are in the encrypted filesystem, what permissions they have, their approximate size, and the last time they were accessed or modified." [2]

Since tarsnap does the block partitioning and encryption client-side, it doesn't suffer from either problem.

[1] http://news.ycombinator.com/item?id=2546626

[2] http://en.wikipedia.org/wiki/EncFS

The post was updated with a command to exclude the EncFS key file from being synced.

Im sorry, but the whole idea of Dropbox was simplicity. This method requires installation of two more pieces software on every machine that will need access to encrypted data and does not explain or guarantee that it will work across platforms which is what dropbox is all about(I can access same files on my phones, tablets, windows pcs, macs and web)

I basically approach Dropbox as a tool that fits its purpose and this purpose unfortunately does not include properly encrypted data. So any sensitive documents would NOT go into dropbox. They would be backed up into an online backup that is encrypted on my side instead.

I find myself wondering if you actually read the content. Your first paragraph seems like a response to the article, but then your second makes it look like you didn't. Are you encrypting your files via hand-calculations before putting it on Dropbox, or using a second software package you installed as a tool? In which case what exactly is so hard about using one of the transparent file systems, which both boast a decent array of OS support options, that you have some sort of solution for that doesn't involve installing something beyond Dropbox?

I'm not sure if we both read the same comment. The second paragraph focuses on the fact that Dropbox is not suitable for sensitive content, and therefor he suggests using another service that offers client-side encryption (Tarsnap, possibly, as I think that it does that). He is not saying that he is putting encrypted files on Dropbox.

exactly, for sensitive data I use a different service that does client-side encryption: CrashPlan