Encrypted-content share links #19

Open
opened 2026-07-25 16:25:43 +00:00 by Cordy · 0 comments
Owner

Public share links (/s/<token>) currently assume plaintext-readable content. When the backing object is age-encrypted, the share handler must decrypt on serve (server-side, using the owner's or a share-scoped key).

  • Decide key scope for shares of encrypted files (owner identity vs dedicated share recipient).
  • Preserve Range + password/expiry semantics.

Deferred from the v0.3 encryption probe.

Public share links (`/s/<token>`) currently assume plaintext-readable content. When the backing object is age-encrypted, the share handler must decrypt on serve (server-side, using the owner's or a share-scoped key). - Decide key scope for shares of encrypted files (owner identity vs dedicated share recipient). - Preserve Range + password/expiry semantics. Deferred from the v0.3 encryption probe.
Sign in to join this conversation.
No labels
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: Cordy/Cairn#19
No description provided.