KlatchianMist

This is a great insight, explained well. Thank you for it.

> The defaults on the (self-hosted) server are also very insecure..

Could you elaborate on this? Which defaults do you consider insecure? Are there ways to trivially change some values for more security?

Not pushing back on your statement, just curious to know more about it.

An interesting take from the post is that nobody other than Seafile is even attempting to cater to the author's requirement. Perhaps it is a very niche requirement? Alternatively, that implementing the requirement in a clean-and-perfect manner is either not possible with the current state of the tech OR it is complicated enough that nobody else bothers to do it given the lack of demand?

It seems that although Seafile's implementation leaves something wanting (I think Option #1 of never sending the key to the server may be a superior option), the sheer fact of the feature's availability trumps the sub-optimality of its implementation. The author also implies that the implementation is "good enough" for his (and presumably most others') use cases.