Are photos encrypted, both in-transit and at rest?

iforgotpassword · on Dec 31, 2020

It's self hosted, so both parts are up to you.

libeclipse · on Jan 1, 2021

Not necessarily. Is unencrypted data even sent to the server? That's controlled at the application layer.

Of course you could setup TLS and FDE but this doesn't guarantee that your data will be safe.

iforgotpassword · on Jan 1, 2021

Huh? It's a web app. If you set up https, no data is ever sent to the server unencrypted.

Likewise setting up FDE means your data is encrypted on the server.

> but this doesn't guarantee that your data will be safe

I don't get what you're trying to get at here. If you're taking about bugs compromising the encryption then I guess this applies to practically every software out there making this a moot discussion.