Re: Store Encrypted Files


Chuck schreef:

Chuck wrote:
tim.de.roock@xxxxxxxxx wrote:
Hi guys,

I have a couple of questions concerning sending and storing encypted
files on a server.

What i would like to do is have
1) a client (preferably browser) encrypt files,
2) send this securely to a server and
3) let the server store this encrypted file,
4) let the client download his encrypted file and decrypt it.

A major requirement is, the encryption key can (should) never be know
by the server !

I have been looking at several options like https, sftp, ssl,...
But i feel like a noob when it comes to security.

Now my questions to you experts out there

1) Is it possible to store encrypted files over ssl, knowing that the
server can't automatically decrypt?
i have found this thread somewere else saying it is not possible
http://channel9.msdn.com/ShowPost.aspx?PostID=260779
2) I want to use a browser to upload files to the server, but since
https isn't really a file transfer protocol, would this be a good idea?
Could the same requirements be met using sftp?
3) Where is the best way to get started using the proposed solution, in
other words, where can i find good documentation?

THX guys!


Sounds like you want GnuPG. Can be downloaded for free at
http://www.gnupg.org/.

I should point out that this requires you to do the encryption and
decryption manually on your client. One advantage is that you don't need
to use an secured network protocol to transfer the file. It was
encrypted before it ever hit the network.

Chuck, thx for your reply!

I thought about that technique also,
and indeed, uploading and downloading do not neccesarily require a
secure protocol.
But this technique implies a client that is capable of encrypting the
files before uploading, and because i do not want to use javascript
(clients turn them on and of as they please) i guess i'm stuck with a
fat client application.
But still i would like to find a solution to use a web interface !

More help appreciated

.

Relevant Pages

  • RE: WinXP Encryption Added users "Access denied"
    ... onto the same computer--in other words, both users have profiles and EFS ... If you want to share files that have been encrypted on a remote server, ... publish that certificate to the AD. ... > encrypted file from PC1 or PC2, it takes a while, and sometimes clicking on ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Store Encrypted Files
    ... files on a server. ... let the client download his encrypted file and decrypt it. ...
    (comp.security.ssh)
  • Re: encryted filesystems
    ... Well, the idea is to actually mount the file on the client, not the server ... If the encrypted file is located on the server, ...
    (comp.os.linux.security)
  • Re: Encrypted File Transfer
    ... > a PHP script on the server side and a c# client application. ... > Setting up my own Server with GMP support is no alternative either in ...
    (comp.lang.php)
  • Re: Using EFS on a server shared drive
    ... Encrypting File System in Windows XP and Windows Server 2003 ... Windows XP performs revocation checking on all certificates for other ... I want multiple users to share an encrypted file on a File server using ...
    (microsoft.public.windows.server.active_directory)