Comment by Svarto
2 years ago
"any-sync networks are permissionless. This means that anyone who knows the IP and port of the coordinator node can connect to it, create new spaces, or download existing encrypted objects. Data inside spaces is always secure, as it requires space encryption keys to read it."
From the docs on self-hosting. I am not a security expert, does anyone know if this is still considered safe? Feels weird that anyone can download my data, even if it is encrypted
Surely that’s just the nature of IPFS, right?
Not necessarily. You can add auth at the encrypted block level: https://peergos.org/posts/bats