Hello All!

Thanks to @solopasha’s work, gocryptfs is now available in Fedora:

* https://koji.fedoraproject.org/koji/packageinfo?packageID=42183

As many know, gocryptfs is a modern successor to EncFS, offering
better performance, active maintenance, and improved security (whereas
EncFS has unaddressed vulnerabilities and is no longer actively
developed). However, the two are not configuration-compatible:
migrating requires decrypting/re-encrypting data, which could pose a
significant burden for existing EncFS users.

This raises two questions for discussion:

1. Should Fedora consider deprecating/retiring EncFS given its
security risks, despite the migration hurdle?

2. If yes, what’s the best path forward? For example:

* Documenting a clear migration guide (e.g., step-by-step encfs →
gocryptfs instructions).
* Adding warnings to the EncFS package (e.g. release notes and/or
startup notifications).
* Coordinating with downstreams (e.g., spins) to phase out EncFS
dependencies if any.

I’d love to hear thoughts on whether this is worth pursuing. And if
so, how to minimize disruption.

-- 
With best regards, Peter Lemenkov.
-- 
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to