Your file-sharing server shouldn't be able to read your files. Here's how I made sure mine can't.

Most "encrypted" file sharing means encrypted in transit and at rest, which is a polite way of saying the server holds the keys and can read everything whenever it likes. I wanted the other kind: the server stores my files and genuinely cannot open them. Here's how that works in

If you spot something wrong in the threat model, I want to hear it.