pete Posted September 28, 2016 Posted September 28, 2016 We occasionally need to send large (200MB+) encrypted files to external agencies/companies. I would like a self-hosted option where we can upload a file and generate a one-time URL and password that can be communicated to an external recipient (url emailed, password phoned through). Ideally no Flash, Java, Silverlight etc involved and the external recipient shouldn't need an account/have to create an account. Bonus points if files are automatically deleted after X configurable limit. I'm aware of things like Zend.to, but the "hasn't been updated since June 2015" element concerns me. What're you using for this (that isn't Dropbox, OneDrive (needs MS login to download), Google Drive)?
Steve21 Posted September 28, 2016 Posted September 28, 2016 7zip on web server with schedule task to delete? Or you really want a commercial software? Steve
limawhiskey Posted September 28, 2016 Posted September 28, 2016 Why self hosted if files are encrypted? I have used a similar method to Steve's before; a file with a long, randomly generated filename. I like the idea of scheduled task to delete though, good idea, you could have a daily schedule to purge files older than x days. I have also used (I realise these are not self hosted but if the file has strong encryption - meh) WeTransfer (Free up to 2GB) https://www.wetransfer.com/we DropSend (free up to 4GB with a limit of 5 sends per month) DropSend | Send Large Files and Email Large Files
pete Posted September 28, 2016 Author Posted September 28, 2016 I don't mind whether it's commercial, open source or otherwise free. Just that it a) works b) an end-user can upload a file and convey the credentials to the correct third party. We've done the "here's an encrypted zip on $webserver, get it within 2hrs or it'll be deleted" for less sensitive stuff, but it's a bit Heath Robinson and we're doing it often enough that something more robust would be useful. Specific self-hosted (or UK/EU service) because I don't want to set a precedent of "it's OK to upload stuff to random web services if you password protect it with Bob123".
FN-GM Posted September 28, 2016 Posted September 28, 2016 I don't mind whether it's commercial, open source or otherwise free. Just that it a) works b) an end-user can upload a file and convey the credentials to the correct third party. We've done the "here's an encrypted zip on $webserver, get it within 2hrs or it'll be deleted" for less sensitive stuff, but it's a bit Heath Robinson and we're doing it often enough that something more robust would be useful. Specific self-hosted (or UK/EU service) because I don't want to set a precedent of "it's OK to upload stuff to random web services if you password protect it with Bob123". Just wondering whats up with Google Drive please?
Dos_Box Posted September 28, 2016 Posted September 28, 2016 (edited) Just wondering whats up with Google Drive please? Or One Drive/One Drive for Business if you have it. Edited to add: Strictly with the schools account and permission that is. Edited September 28, 2016 by Dos_Box
pete Posted September 29, 2016 Author Posted September 29, 2016 We do have OneDrive for Business, but (IIRC and just tested to confirm) external sharing access it requires someone to have a Microsoft/Live/Hotmail login in order to get the file/folder. We don't have Google Apps setup, though I know you can (well, Google Apps for Business at least) set a public link that doesn't require a login.
Arthur Posted September 29, 2016 Posted September 29, 2016 What're you using for this (that isn't Dropbox, OneDrive (needs MS login to download), Google Drive)? Google Drive (via Google Apps for Education) would be perfect since it's really easy for users to upload files (just drag-and-drop them into the browser window), you get unlimited storage space and the person you are sending the files to doesn't need to sign in to download the files. Although the unique part of the shareable URL is only 28 characters long it would still take at least. 76.43 million trillion trillion centuries to guess since there are 2.40 x 1055 different combinations. Google considers long unguessable URLs secure... www.theverge.com/2015/6/23/8830977/google-photos-security-public-url-privacy-protected
cpjitservices Posted September 29, 2016 Posted September 29, 2016 (edited) Easy. Check out BitTorrnt Sync. You set up the folder on your server from a local drive, this generates a 'key' Read or Read/Write key. You send this key to the third party who also install the bittorrent sync client and add the key into the add share part of the client this key then gives them access to the content in which you are hosting, it is all encrypted. Guide attached. BitTorrentSyncUserGuide.pdf Edited September 29, 2016 by cpjitservices
Arthur Posted September 29, 2016 Posted September 29, 2016 Ideally no Flash, Java, Silverlight etc involved and the external recipient shouldn't need an account/have to create an account. You set up the folder on your server from a local drive, this generates a 'key' Read or Read/Write key. You send this key to the third party who also install the bittorrent sync client and add the key into the add share part of the client this key then gives them access to the content in which you are hosting, it is all encrypted. That might be too much hassle.
sparkeh Posted September 29, 2016 Posted September 29, 2016 We do have OneDrive for Business, but (IIRC and just tested to confirm) external sharing access it requires someone to have a Microsoft/Live/Hotmail login in order to get the file/folder. Nope, you can share outside your organisation with no sign in required. You can also put an expiration time on the link as well. I just tested this and it works https://support.office.com/en-us/article/Video-Share-documents-in-Office-365-1438f676-ee5c-40cb-a1f3-f814e649d2ea 1
pete Posted September 29, 2016 Author Posted September 29, 2016 (edited) Yup, the person on the other end of the Internet will have variable IT proficiency and won't have admin rights to install stuff. Anything more difficult than "click this, type this" is likely to involve me supporting them. Nope, you can share outside your organisation with no sign in required. You can also put an expiration time on the link as well. I just tested this and it works https://support.office.com/en-us/article/Video-Share-documents-in-Office-365-1438f676-ee5c-40cb-a1f3-f814e649d2ea Yeah, you're right - I was testing OneDrive with a folder which doesn't allow the creation of a "View" or "Edit" link without logging in: Individual files are fine: That might just do the job. Edited September 29, 2016 by pete
mattstevenson2005 Posted September 29, 2016 Posted September 29, 2016 We host our own owncloud platform and can give remote users a login or users can share encrypted files with a password. Data never leaves our site until the recipient requests a copy so no storing in the cloud 1
cpjitservices Posted September 30, 2016 Posted September 30, 2016 @mattstevenson2005 - We had owncloud and kept hitting limitations with it, file sizes and the overall Sync mass.... We have moved on to Resillio Sync instead.
chris_uk Posted September 30, 2016 Posted September 30, 2016 @mattstevenson2005 - We had owncloud and kept hitting limitations with it, file sizes and the overall Sync mass.... We have moved on to Resillio Sync instead. What limits did you hit with Owncloud? We've been running it for a few years. Have no problems with sending out DVD images to the publishers. Used it the other day to send a 30GB virtual machine to another establishment.
cpjitservices Posted September 30, 2016 Posted September 30, 2016 What limits did you hit with Owncloud? We've been running it for a few years. Have no problems with sending out DVD images to the publishers. Used it the other day to send a 30GB virtual machine to another establishment. We had some clients that where hosting folders of say 40Gb+ - Sync'ing would just stop or hang. This would be the initial sync say copy from Fileserver to the Owncloud server. Clients who used the system from new and added their own files on to it where fine but copying any large directories from a server to owncloud it would hang or stop. Also had problem with long path/file names which is one of the problems with sync. Resillio Sync has been spot on.. Its faster too.
cpjitservices Posted September 30, 2016 Posted September 30, 2016 (edited) What's the cost for Resillio Sync? Free for home use. https://getsync.com/connect Only downfall... OwnCloud is free. But there are so many more benefits with Resillio. Edited September 30, 2016 by cpjitservices
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now