security issue

olivierm

good pm,
i upgrade my boxcryptor classic to the v2 and i think the v2 is not secure.
i explain why.

in boxcryptor i had to put a password to cryp/decrypt.
If i share my folder i need to give this password.
Now, i dont need to give the password, i need only to share the folder with another user.

So the others users dont need the password.
If i think, i suppose that you can log into your database and add a specific user to my share folder and this one will have all access without need of my password. So i guess that you can share all our data with who you want.
And dont tell me, you cannot add a user in my share member, i will not believe you ;-)

i think it was much more secure the classic version where i need to give the password.
I hope it's wrong what i think.
Have a nice day

Christian

Hello olivierm,

don't worry, it's all perfectly secure ;-).
The reason is that for sharing, your private key is required. And your private key can only be unlocked by your password. Since we cannot unlock your private key, we are unable to share your files with anyone.
We actually explained in detail how this works and why it is secure in our technical overview:
https://www.boxcryptor.com/en/technical-overview#anc03

Best regards,
Christian