They aren’t the end-all be-all, but I would have still liked to see crypt audited to be able to recommend it with more confidence. I understand that external audits are expensive, and that they only apply to a specific point in time. Rclone also has a config file with all of its configuration that you can copy to another system so you don’t have to set everything up every time. It has many other applications and can be used for other things, such as organizing and peforming routine cloud backups with the Bitwarden CLI. This can be set up to be automated and done periodically with a shell script, for example. My personal workflow consists of having a Cryptomator vault which I Rclone to multiple cloud providers (Drive, Dropbox, MEGA etc) simultaneously. While Rclone can be used as both a cloud end-to-end encryption and sync tool (and a very lightweight and minimal one at that), it pairs very well with Cryptomator for cloud syncing. However, most people use and rely on Termux for using Rclone on Android which I believe is currently the most efficient and practical solution. RCX is indeed a good Android app for it, but it’s in early development and development on it has clearly stagnated. Nothing too in-depth and just through a quick search and glance I found a post from a few years ago which sheds some light on this ( Is/was a security auditing procedure in place for crypt? - #10 by ncw - Help and Support - rclone forum) and maybe someone else who has done a lot more research can weigh in. Unless I’m mistaken, I don’t think it’s been externally audited yet. I’m happy to hear other people’s thoughts on this, as well as more info on the project and reasons as to why we should consider it or evaluate it further. Now, Android support isn’t necessarily required for us to consider Rclone, but I believe that’s always good to have proper cross-platform support nowadays. It may not be fully stable and contain bugs or untested features. This app is currently undergoing many changes. Is Rclone, or at least the encryption implementation audited?Īlso, this largely seems to be a desktop solution, with Android support being centered around rooted devices, which we heavily recommend against.Īfter digging a little bit further, I found RCX which looked promising initially, but it hasn’t received an update in over a year, and is on SDK 29 right now.įurther research led me to extRact which seems to be a fork of RCX to maintain it however, it doesn’t seem like it’s something that’s currently production-ready. What I find especially interesting and relevant to our audience is the ability to encrypt data before it’s sent to the cloud. Hi, thank you for opening a dedicated thread for this, and for outlining your thoughts!Īfter taking another glance at this, I can definitely see how it is useful.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |