khanh.pndc/nextcloud-docs
1
0
Fork 0
mirror of https://github.com/nextcloud/documentation.git synced 2026-01-03 02:09:45 +07:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #344 from nextcloud/improve-encryption-manual

Browse Source 
Add a short encryption FAQ to the docs
This commit is contained in:
Morris Jobke
2017-01-31 08:41:46 -06:00
committed by GitHub
parent 3c8c335cea 8bb1809569
commit 7b7d528500
2 changed files with 38 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
admin_manual/configuration_files/encryption_configuration.rst
View File

@@ -143,6 +143,8 @@ Encryption settings can be configured in the mount options for an external
storage mount, see :ref:`external_storage_mount_options_label`
(:doc:`external_storage_configuration_gui`)
.. _enable-file-recovery-key:
Enabling Users File Recovery Keys
----------------------------------

36
user_manual/files/encrypting_files.rst
View File

@@ -27,6 +27,42 @@ compromised the intruder may get access to your files. (Read
<https://owncloud.org/blog/how-owncloud-uses-encryption-to-protect-your-data/>`_
to learn more.)
Encryption FAQ
--------------
How Can Encryption Be Disabled?
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
The only way to disable encryption is to run the :ref:`"decrypt all" <encryption_label>`
script, which decrypts all files and disables encryption.
Is It Possible To Disable Encryption With The Recovery Key?
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Yes, *if* every user uses the :ref:`file recovery key
<enable-file-recovery-key>`, :ref:`"decrypt all" <encryption_label>` will use it
to decrypt all files.
Can Encryption Be Disabled Without The User’s Password?
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
If you don't have the users password or :ref:`file recovery key
<enable-file-recovery-key>` then there is no way to decrypt all files. What's
more, running it on login would be dangerous, because you would most likely run
into timeouts.
Is It Planned To Move This To The Next User Login Or A Background Job?
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
If we did that, then we would need to store your login password in the database.
This could be seen as a security issue, so nothing like that is planned.
Is Group Sharing Possible With The Recovery Key?
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
If you mean adding users to groups and make it magically work? No. This only
works with the master key.
Using Encryption
----------------