Cyberduck Mountain Duck CLI

Opened 2 years ago

Last modified 5 months ago

#9367 new enhancement

Show checksums and remote identity for completed file transfers

Reported by: ralfhauser Owned by:
Priority: normal Milestone:
Component: core Version: 4.8.3
Severity: normal Keywords:
Cc: jph@… Architecture:
Platform:

Description (last modified by dkocher)

Phase A

  1. If a user clicks on the "i" button as per the attached, mock-up screenshot, a pop-up will open and show as ASCII Text
    1. origin URI, protocol, SHA256, SHA1, ... of the downloaded (or uploaded) file
    2. CN, Issuer-CN, SHA256, SHA1 of remote public key (if the transfer was encrypted)

Phase B

  1. for 1b) not only the meta info is shown, but the certificate (assuming x509 for once) and its chain down to the root can be opened

Phase C

  1. the pop-up and public key (certs) are put into a PDF that is signed with a dummy certificate and rfc3161 time-stamped (e.g. with http://tsa.pki.admin.ch/tsa - configurable)

Phase D

  1. the same as 3) but the signature can also come out of a SuisseID or alike

Phase E

  1. the same as 4) but the pdf complies with the PDF/A standard ==> the certificate can no longer be put as a file-attachment in .cer or .pem .crt or similar format to the pdf, but the base64 encoded certs need to be printed as base64 PEM into the trailing pages of the PDF

Attachments (1)

20160315_RFE_MetaInfo.png (23.5 KB) - added by ralfhauser 2 years ago.
Meta-Info GUI idea

Download all attachments as: .zip

Change History (9)

Changed 2 years ago by ralfhauser

Meta-Info GUI idea

comment:1 Changed 2 years ago by dkocher

  • Description modified (diff)
  • Summary changed from Show meta information on transfers to Show checksums and remote identity for completed file transfers

comment:2 Changed 2 years ago by dkocher

#9584 closed as duplicate.

comment:3 Changed 2 years ago by ralfhauser

are you sure that #9584 is a duplicate?

The goal is that evidence of an upload is visible (best even rfc3161 timestamped) that can be understood / used by a non-technical person like a "lawyer" who is increasingly trained by the authorities to work with pdf/a and digital signatures/timestamps.

comment:4 Changed 2 years ago by ralfhauser

see also #9656

comment:5 Changed 2 years ago by dkocher

#9656 closed as duplicate.

comment:6 Changed 16 months ago by jph@…

  • Cc jph@… added

comment:7 follow-up: Changed 5 months ago by dkocher

#10255 closed as duplicate.

comment:8 in reply to: ↑ 7 Changed 5 months ago by filmdreams

Replying to dkocher:

#10255 closed as duplicate.

Okay thanks - my proposal was similar to this. As it doesn't stipulate currently in the uploads panel that all the files were checksum'd on prior to upload and transfer completion can I therefore assume that CyberDuck has done so and therefore wouldn't display "completed" unless this test has also been completed successfully and that the files on B2 are definitely identical copies of the local files? I can live without the feature if this is the case.

Note: See TracTickets for help on using tickets.
swiss made software