Unless they've really cleaned up their act, nextcloud just isn't suitable for real data.
I would pay _so_ much money for a correctly functioning WebDAV server, maintained by responsible professionals.
EDIT: looks like they have _not_ cleaned up their act whatsoever: https://github.com/nextcloud/end_to_end_encryption/issues/38...
I’d love to learn more. Can you explain what your use case is and what is “correctly functioning” in this context?
By correctly functioning, I mean that I can trust that it operates correctly (per the specs) and securely, or at the very least that any major issues are taken seriously by the team. (And getting it FIPS validated would push it over the line to _so_ much money.)
That link states that is is fixed now, though?
> But after updating ... now it works, but I don't now why and I'm not sure why and if it will continue working properly. I cannot trust such a system.
In any case, the relevant thing about that issue is two people reported running into a serious problem, months later it's still open with no information on what may have caused it.
Nowhere. Where did I say they were?
Nearly the same issue happening again means they never bothered to set up testing for this and security just isn't something they pay any mind to.
It happens to the best of software projects. If we write off using those, we may as well stop using computers.
> Horrible security issues happen, but that was not a remotely acceptable way to handle it in any project that's more than a toy.
We don’t know how they handled it. They may have handled the communication poorly, but regarding the security issue itself, we don’t know, because they didn’t tell us.
> Nearly the same issue happening again means they never bothered to set up testing for this and security just isn't something they pay any mind to.
You seem to be claiming that no software with any security features can have more than one security failure, ever.
> We don’t know how they handled it. They may have handled the communication poorly, but regarding the security issue itself, we don’t know, because they didn’t tell us.
And maybe the moon is actually perfectly spherical, as God intended, being a heavenly body and all and those craters we see are actually filled in with an invisible undetectable substance.
Sarcasm aside, notifying users of an issue in a timely manner is elementary to security. Trying to sweep it under the rug does not make inspire even the smallest sliver of confidence in how they'll handle their next issue.
> You seem to be claiming that no software with any security features can have more than one security failure, ever.
No, but I do expect that a project that lists security as it's primary advantage [1] to at least make an integration test to make sure that files in encrypted folders/sub-folders are, you know, actually encrypted. If _any_ project out there keeps having the same bugs, then no, I would not consider them to be serious people either.