Server-Side Encryption with Client-Managed Keys

Feature requests
1

Hi!

I’m very happily using TagSpaces Web with minio, both self-hosted on a single NAS. I’m now looking for a way to encrypt the TagSpaces data at rest on the NAS.

MinIO SSE-C supports client-driven encryption of objects before writing the object to the drive, i.e. by using a key provided by the client. It is functionally compatible with Amazon Server-Side Encryption with Customer-Provided Keys and seems ideal for securing a typical TagSpaces Web installation?

https://min.io/docs/minio/kubernetes/gke/administration/server-side-encryption/server-side-encryption-sse-c.html#

Could this be implemented in Tag Spaces? The key could be supplied by the user, stored with the Tag Spaces Location and then used in every request to the server?

Thanks for considering.

2

This is a very good idea, thanks for suggesting it! Since TagSpaces is an open source project we are accepting pull requests, in case someone is willing to contribute this feature…

3

Thanks. I can’t offer coding at the moment. But I’d be very willing to help with testing if anyone can provide the code …