Re:Send: A Fork of Mozilla's Firefox Send
by AdmiralAsshat on Wednesday May 05, 2021 @02:14PM
(#27053582)
What level of logging/privacy can we expect from a self-hosted instance? I had faith in Mozilla's commitment to privacy, but I don't necessarily trust some random dude's AWS instance.
[ Parent
| on HN ]
Re:Send: A Fork of Mozilla's Firefox Send
by timvisee on Wednesday May 05, 2021 @02:24PM
(#27053714)
> What level of logging/privacy can we expect from a self-hosted instance?
It really depends on who is hosting it.
Send itself doesn't really log anything except for errors. A reverse proxy in front of it might be used for an access log, which is default with the docker-compose template for it. Files are always encrypted on the client, and it or its keys are never seen on the server.
If you're wondering for the instance I've linked: it runs on Digital Ocean. I have an access log (IP per request, for 24h), I can list encrypted blobs and their metadata (creation time, size), and that's pretty much it.