Comment by highball-it | Hacker News Reader

Top New Best Ask Show Jobs

Comment by highball-it | Hacker News Reader

You have to trust the VPS provider.

You don't have to if you use EncFS. All encryption is done client-side.

The only thing your VPS provider could do is delete your files, but Unison's backup feature should protect you from losing your files (in a way).

Your VPS provider, can in effect, chroot in to your environment, so EncFS is vunerable.

If encryption is done client-side, the data is still encrypted server-side and chrooting does nothing.

What do you mean by 'vulnerable'? All encryption is done on your computer/notebook, so a chroot on the server doesn't decrypt the files.

The EncFS is mounted locally (client-side), so the files aren't decrypted at all on the server-side. You're just syncing fully encrypted files.

Yep. This is an important point.

I can still follow this guide to create my online-NAS box and use it across devices.

Reply on news.ycombinator.com