Show HN: Trunk – Private links for you to collect and distribute digital content

Post by dko » Mon, Oct 13, 2014, 3:37 PM UTC

Post by [deleted] » Mon, Oct 13, 2014, 4:00 PM UTC

[deleted] wrote: post #2

[deleted]

Post by Fastidious » Mon, Oct 13, 2014, 4:11 PM UTC

rakoo wrote: post #4

The no-signup is really good ! It would be even better if you added client-side encryption and a rudimentary support for folders. The use-case I have in mind is sharing photos of an event: there may be a ton, we may want to organize per uploader (so as to not mess up with names) and I'm not totally comfortable with all my pics being in clear on Amazon's servers. Neat otherwise !

Post by rakoo » Mon, Oct 13, 2014, 4:38 PM UTC

Fastidious wrote: post #5

rakoo wrote: post #4

The no-signup is really good ! It would be even better if you added client-side encryption and a rudimentary support for folders. The use-case I have in mind is sharing photos of an event: there may be a ton, we may want to organize per uploader (so as to not mess up with names) and I'm not totally comfortable with all my pics being in clear on Amazon's servers. Neat otherwise !

They say they encrypt them. They are not?

Post by Fastidious » Wed, Oct 15, 2014, 2:15 PM UTC

junto wrote: post #8

rakoo wrote: post #7

Earlier quoted context omitted.

A quick test showed that content was sent in cleartext, directly to trunked's s3 bucket, and then some metadata is sent to trunked.me. Maybe that metadata is encrypted ? Anyway, the content does not leave your browser encrypted.

Are you expecting encryption of the file in JavaScript on the client before it is uploaded?