https://discord.cloudflare.com logo
Join Discord
Powered by
# r2
  • k
    S3 is basically the standard for cloud storage too - pretty much all providers have an S3 compatible API
  • i
  • s
    Oh
  • v
    SSE-C is a form of encryption where you don't have to encrypt on your end and we promise we only use the keys you provide ephemerally (i.e. without the keys you provide even we can't decrypt your object)
  • a
    Perhaps make a section for headers that are globally unsupported? Instead of writing them under each operation.
  • k
    that sounds nice
  • s
    hmm, seems interesting
  • k
  • k
    was gonna see how the PR looks at the moment but it failed
  • k
  • s
    so it's like, cloudflare encrypts/decrypts for you but you provide the keys?
  • k
    that's an unsupported header i believe, nvm
  • v
    R2 is always storing everything encrypted. SSE-C is just like an extra pinky promise
  • v
    (We haven't implemented SSE-C yet)
  • a
    and I guess it's primarily for compliance purposes?
  • s
    ahh, that makes more sense
  • k
    and privacy focused people, having extra encryption never hurts
  • v
    Potentially? I haven't delved into compliance too much and there's so much security theater it makes my soul hurt
  • s
    kinda at least but i think get the gist of it
  • j
    if it's really sensitive you can always encrypt before uploading 🙂
  • a
    You're going to want to use client-side encryption for that.
  • j
    Just need rclone to support R2 now 😄
  • v
    What's missing?
  • k
    ik, but that's more effort than passing a header/request
  • v
    But generally our encryption approach is pretty good and we're not going to go spelunking through object contents
  • v
    And yes, SSE-C does provide a nice middle ground
  • s
    So I saw in the R2 dashboard that you would be able to upload from the dashboard, can you download data from buckets in the dashboard as well?
  • v
    It's not there yet but yes
  • v
    there are file size limitations for now but we hope to lift that by the end of the year
  • j
    I don't have dashboard access yet...is R2 still Workers API or does it have S3 yet?
1...272829...1050Latest