Perfect forward secrecy...

[gutsle (Chocolate Cravings)]

@canton7

I don’t see that claim being made in any way. Encrypting data at rest and data in transit are two very different things.

As I said, PFS is basically irrelevant if data at rest is unencrypted.

@canton7

If Syncthing encrypted your data at rest, you would not be able to access your files! (This can be a good thing in a limited number of scenarios, but not in the majority of cases). Someone can gain access to your computer and read your files whether or not Syncthing is installed: Syncthing never claims that it will make your computer more secure.

In a client server scenario where I want to sync my files to/from an untrusted server it makes perfect sense to encrypt the files. That’s what I am looking for. Files should be encrypted before uploading and decrypted after downloading. If you compromise the server you get nothing.

@canton7

How else would you word it?

Just don’t mention PFS. Clearly state that data is encrypted in transit with TLS and is stored unencrypted on the server. At least that’s the information that I was looking for.