Files should be encrypted

[gulachek]

The web server should generate an in memory encryption key to encrypt uploaded files on disk so that only the live web server can decrypt when serving. Seems like a no brainer precaution

[gulachek]

Interesting to consider if there should be a way for app to serve files instead of uploading. Would complicate the abstraction model which is why I'm hesitant. At that point we could make a more powerful fastcgi protocol or something that would be more general purpose (and complex).

[gulachek]

In response to the last comment, what am I worried about if the files are encrypted? The uploaded files are clearly intended for someone on the user's machine to have access to in the browser. Only way to decrypt would be to find encryption key in memory from live process which could already be done against browser when loaded, or if raw key stays in memory picked up by another process it could leak, which I guess should be considered