{"action":"created","issue":{"url":"https://api.github.com/repos/owncloud/core/issues/16722","labels_url":"https://api.github.com/repos/owncloud/core/issues/16722/labels{/name}","comments_url":"https://api.github.com/repos/owncloud/core/issues/16722/comments","events_url":"https://api.github.com/repos/owncloud/core/issues/16722/events","html_url":"https://github.com/owncloud/core/issues/16722","id":84555917,"number":16722,"title":"Encrypt File and Folder Names","user":{"login":"MTRichards","id":1818977,"avatar_url":"https://avatars.githubusercontent.com/u/1818977?v=3","gravatar_id":"","url":"https://api.github.com/users/MTRichards","html_url":"https://github.com/MTRichards","followers_url":"https://api.github.com/users/MTRichards/followers","following_url":"https://api.github.com/users/MTRichards/following{/other_user}","gists_url":"https://api.github.com/users/MTRichards/gists{/gist_id}","starred_url":"https://api.github.com/users/MTRichards/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MTRichards/subscriptions","organizations_url":"https://api.github.com/users/MTRichards/orgs","repos_url":"https://api.github.com/users/MTRichards/repos","events_url":"https://api.github.com/users/MTRichards/events{/privacy}","received_events_url":"https://api.github.com/users/MTRichards/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/owncloud/core/labels/app:encryption","name":"app:encryption","color":"02d7e1"},{"url":"https://api.github.com/repos/owncloud/core/labels/enhancement%20-%20proposed","name":"enhancement - proposed","color":"FF9900"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/owncloud/core/milestones/11","html_url":"https://github.com/owncloud/core/milestones/backlog","labels_url":"https://api.github.com/repos/owncloud/core/milestones/11/labels","id":697149,"number":11,"title":"backlog","description":"","creator":{"login":"MTRichards","id":1818977,"avatar_url":"https://avatars.githubusercontent.com/u/1818977?v=3","gravatar_id":"","url":"https://api.github.com/users/MTRichards","html_url":"https://github.com/MTRichards","followers_url":"https://api.github.com/users/MTRichards/followers","following_url":"https://api.github.com/users/MTRichards/following{/other_user}","gists_url":"https://api.github.com/users/MTRichards/gists{/gist_id}","starred_url":"https://api.github.com/users/MTRichards/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MTRichards/subscriptions","organizations_url":"https://api.github.com/users/MTRichards/orgs","repos_url":"https://api.github.com/users/MTRichards/repos","events_url":"https://api.github.com/users/MTRichards/events{/privacy}","received_events_url":"https://api.github.com/users/MTRichards/received_events","type":"User","site_admin":false},"open_issues":599,"closed_issues":2,"state":"open","created_at":"2014-06-20T19:52:03Z","updated_at":"2015-06-03T13:10:39Z","due_on":null,"closed_at":null},"comments":3,"created_at":"2015-06-03T13:10:29Z","updated_at":"2015-06-03T18:44:41Z","closed_at":null,"body":"As an ownCloud admin, I want to ensure that all file names and folders names are also encrypted when the encryption app is enabled, so that I do not expose sensitive information contained in file and folder names to admins on the server.\r\n\r\nAcceptance Criteria:\r\n•\tFile and Folder names are encrypted and cannot be viewed by an admin browsing the server files\r\n•\tEncryption of file names / folder names hides the names\r\n•\tClearly paths can't be encrypted or a posix file system can't be used\r\n•\tThe object store implementation currently provides a similar capability that could be a similar related interface\r\n•\tThe meta data in the database is not to be encrypted at this time\r\n•\tIf encryption is on, filenames and folder names are encrypted from that point forward\r\n•\tMigration will be a real challenge, so an upgrade needs to 1) provide a facility to migrate existing users to encrypted filenames 2) a capability to turn off the encryption and migrate\r\n"},"comment":{"url":"https://api.github.com/repos/owncloud/core/issues/comments/108570699","html_url":"https://github.com/owncloud/core/issues/16722#issuecomment-108570699","issue_url":"https://api.github.com/repos/owncloud/core/issues/16722","id":108570699,"user":{"login":"MTRichards","id":1818977,"avatar_url":"https://avatars.githubusercontent.com/u/1818977?v=3","gravatar_id":"","url":"https://api.github.com/users/MTRichards","html_url":"https://github.com/MTRichards","followers_url":"https://api.github.com/users/MTRichards/followers","following_url":"https://api.github.com/users/MTRichards/following{/other_user}","gists_url":"https://api.github.com/users/MTRichards/gists{/gist_id}","starred_url":"https://api.github.com/users/MTRichards/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MTRichards/subscriptions","organizations_url":"https://api.github.com/users/MTRichards/orgs","repos_url":"https://api.github.com/users/MTRichards/repos","events_url":"https://api.github.com/users/MTRichards/events{/privacy}","received_events_url":"https://api.github.com/users/MTRichards/received_events","type":"User","site_admin":false},"created_at":"2015-06-03T18:44:41Z","updated_at":"2015-06-03T18:44:41Z","body":"@LukasReschke Good discussion top have here. Thanks for linking the two issues together, I could not find the other older encrypt filename issues.\r\n\r\nThere are two sides to this, the attack vector and the policy check box requirement. \r\n\r\nThe attack vector is, for example, a backup admin who can find information about what is contained in a file after taking a backupof ownCloud and perusing the backup, or searching, because the filename is front and center. This is the worry, the file name divulges sensitive info \"Matt will be fired.doc\" as an example. \r\n\r\nThe policy requirement is a check box, that the filename and folder are in fact encrypted so that even this small risk (who names files that way anyway?) are avoided by the company, and the company policy requires it. Whether it is real or not, it is a perception that it is important. \r\n\r\nNote: this is not currently prioritized, so not super high priority.\r\n"}}