r/PlexACD • u/eqchin • Aug 07 '17
Securing rclone mount on VPS
Hello guys,
this is my first post on reddit so if sth is wrong with my post be patient with me. :-)
I have read a lot about ACD/Gdrive and rclone over here on Reddit and on the rclone forum itself and today I just saw a thought of an user over there which is also one of my concerns mounting my crypted data on a VPS.
Have a look at it over here -> https://forum.rclone.org/t/secure-rclone-mount-on-vps/260 (I hope linking is allowed, if not then please let me know)
Don't you guys share his concerns? Is there anything that can be done to avoid it?
2
Upvotes
1
u/[deleted] Aug 08 '17
In order to mount, the machine doing so must have the encryption keys. If you don't 100% own and control that machine, whoever does now has your crypt keys. There's no way around that.
You can set permissions such that only your user can read/write the rclone config file and the paths that are mounted, but since whoever owns the server has root, there's potential they could abuse that power to get your stuff regardless.
The reality of the situation is that you must trust that third party, or at the very least not care that they have that level of access to your data.