🆕 Software Suggestion | Tresorit (file storage)

[udf2457]

Basic Information

Tresorit
File Storage
https://tresorit.com/

Description

Fantastic secure zero-knowledge file storage service based in Switzerland.

They also have a free, secure file sending service https://send.tresorit.com/

[dngray]

This would likely be relevant to #1713

[udf2457]

As a side note, I did see that the prior attempt by someone else at listing Tresorit was closed in favour of Mozilla. Which struck me as odd because for starters Mozilla is very much US-based and no doubt uses US servers whilst Tresorit is 110% Swiss and uses servers in far more favourable jurisdiction.

[subsys-R9boq8]

I did see that the prior attempt by someone else at listing Tresorit was closed in favour of Mozilla.

Probably because Firefox Send is FOSS/FLOSS and is self-host friendly?

And that reminded me of another similar FOSS ans self-host friendly file sharing program LUFI (Demo instance/Source code), which also encrypt files before upload (and of course, decrypt files after download) and embed decryption key in url.

[udf2457]

Probably because Firefox Send is FOSS/FLOSS and is self-host friendly?

Still doesn't detract from the hard fact that they are a US organisation and their servers are largely US based.

You can't have it both ways. You can't rant on about "five eyes" and mass surveillance (https://www.privacytools.io/classic/) and yet only promote service options provided by US organisations.

[subsys-R9boq8]

Still doesn't detract from the hard fact that they are a US organisation and their servers are largely US based.

Yeah if you're not satisfied with that you can just git clone and make your own instance in some country not included in the 5/9/14 eyes, that's my main reason to recommend FF send instead of Tresorit (though probably not very normal-user-friendly).

[blacklight447]

Sseeing how Firefox Send is now dead, this seems like a reasonable service to include. Even if its closed source. Firefox send was browser encryption anyway, so it was always hard to trust the encryption if you didn't self host it. @privacytools/editorial

[joshgrift]

Tresorit is a software product. Wouldn't it make sense to include it under Cloud Storage? It's a very valuable alternative to iCloud, Dropbox, and GDrive. Since it's based in Switzerland and is end to end encrypted, I feel like it matches the criteria of privacytools.io very well.

[lrq3000]

Can Tresorit be self-hosted? If not, that's likely the reason why it was not included on PTIO. If you notice, most sections only include self-hostable services, except of course for services where it's not possible or very impractical, eg, hosting.

[joshgrift]

It is not self hosted, but I do think that privacytools.io has lots of services that aren't self hosted though, such as their email provider list.

[lrq3000]

Yes but as I said that's one of the few exceptions. It depends on the open-source offering. Currently Nextcloud is listed in cloud providers, which has lots of hosters for those who don't want to self-host, but are powered by an open-source and potentially self-hostable software for those who want maximum privacy (there are also other open-source candidates such as Duplicati and Peergos). For file sharing, there are much more flexible open-source solutions with unlimited file size (OnionShare, MuWire, Magic Wormhole, ShareDrop).

Note I'm not part of the PTIO team, the above reflect only my own opinion.