The company is offering technology preview of end-to-end encryption.
Even if Wikileaks tried to scare us off, telling that CIA can effectively bypass end-to-end encryption, that’s far from truth. While CIA can compromise the target devices they can’t break the end to end encryption. That is why, depending on who you talk to, end-to-end encryption is extremely critical in today’s world when state-sponsored cyberattacks, mass surveillance is becoming a norm.
Nextcloud, the fully open source enterprise file sync and storage solution is moving in that direction. The company has announced technology preview of Nextcloud server and client components that offer end-to-end encryption in the clients.
“Organizations that demand the utmost security need a true enterprise solution that doesn’t require users to manually exchange encryption keys and long, complex passwords or share large, encrypted volumes” said Lukas Reschke, Security team lead at Nextcloud.
“Nextcloud 13 will be first to market with an integrated, secure technology to keep a subset of highly sensitive files cryptographically secure even in the worst case of an undetected, full server breach.”
According to the company, the feature offers advanced key management, easy and secure end-to-end encrypted sharing, Cryptographic Identity Protection and support for enterprise capabilities like HSM support and an offline administrator recovery key
“Nextcloud is first to offer seamless, integrated end-to-end encryption in its clients as part of a complete enterprise class file sync and share solution”, said Nextcloud Founder and Managing Director Frank Karlitschek. “Secure yet easy key handling between clients and users with enterprise key management and recovery options set this solution apart from others.”
In addition to features like web browser protections, brute force detection and multi-factor authentication, Nextcloud 13 will also feature production ready end-to-end encryption to its clients as an option for system administrators and users.
The features are currently are in preview mode and must not be installed on a production server. It’s meant for testing and gathering user feedback, so please go ahead and try it out on a test system.