End to End encryption is production ready!

If you read this, you probably are interested in encrypting your data so only you are the only one that can access your data. However,  there are multiple ways to encrypt your data. We are using Nextcloud.com as open source software, so we are using their options.

The option Server Side encryption (SSE) is used to encrypt the files from the Nextcloud instance. However, as it is the server who is doing the encryption, the decryption keys are stored on the server. If that server is in your home, that is fine. But if you are using a hosting service, the keys are on the server that is located at your hoster. If it’s an evil hoster, they can access your keys and decrypt your data. That’s why we don’t believe in this kind of encryption: it still requires you to trust the vendor. A lot of vendors advertise with this feature, but in our view it’s only as much worth as you trust your provider.

End to End Encryption (E2EE) is probably what you want if you are interested into encrypting your data. E2EE can encrypt your data and only you can look at it on your device like a phone or laptop. It has some drawbacks, like the server (and the webinterface) can’t read the files as it can’t decrypt them. This is by design because only you have the encryption keys on your device. Also collaboration and sharing files is not possible anymore unless you give others your secret. However, if you have sensitive files like a picture of your driver’s license, this is a perfect fit. It also does not require to trust your hosting provider.

However, E2EE is a troublesome child at the developers at Nextcloud. We pledged quite some money to get it developed in early 2018, offered development time, used our silver partner status to keep pressure on, but it took a long time to get ready. This was even made harder as Nextcloud GmbH used E2EE a lot in their marketing even though it was basicly unusable and the status of development very unclear. We were quite frustrated with the lack of development, as we think we really need E2EE for our users. The whole goal behind The Good Cloud is that we are a full service provider, which takes care of all the aspects of hosting Nextcloud in a privacy friendly way. But in the end, it comes down to trusting us to be the good guys. E2EE takes away that need to trust us, which makes our service a whole lot more privacy friendly!~

But away with all our frustration! E2EE looks to be production ready! We would like to thank Nextcloud and thank any of our users who made it clear to Nextcloud this was a wanted feature!