Hello All! Thanks to @solopasha’s work, gocryptfs is now available in Fedora: * https://koji.fedoraproject.org/koji/packageinfo?packageID=42183 As many know, gocryptfs is a modern successor to EncFS, offering better performance, active maintenance, and improved security (whereas EncFS has unaddressed vulnerabilities and is no longer actively developed). However, the two are not configuration-compatible: migrating requires decrypting/re-encrypting data, which could pose a significant burden for existing EncFS users. This raises two questions for discussion: 1. Should Fedora consider deprecating/retiring EncFS given its security risks, despite the migration hurdle? 2. If yes, what’s the best path forward? For example: * Documenting a clear migration guide (e.g., step-by-step encfs → gocryptfs instructions). * Adding warnings to the EncFS package (e.g. release notes and/or startup notifications). * Coordinating with downstreams (e.g., spins) to phase out EncFS dependencies if any. I’d love to hear thoughts on whether this is worth pursuing. And if so, how to minimize disruption. -- With best regards, Peter Lemenkov. -- _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
