If I pair my Android phone and my laptop, I can share files over Bluetooth from the phone to the laptop. I’ve started finding this a really convenient method for me to send files to a Linux laptop without needing to install a separate app on either the phone or my laptop. Especially when I’m away from my home network (I use SFTP at home).

How secure is this? Is there encryption by default and could someone else nearby with a receiver potentially decode the file you’re sending?

      • llii@discuss.tchncs.de
        4·
        3 days ago

        No, thanks:

        It uses a WebRTC peer-to-peer connection. WebRTC needs a signaling server that is only used to establish a connection. The server is not involved in the file transfer.

        If your devices are paired and behind a NAT, the PairDrop TURN Server is used to route your files and messages.

        • Deckweiss@lemmy.world
          2·
          3 days ago

          What’s so bad about servers?

          Both are open source.

          The signaling server just sees the IPs of your devices and matches them by roomID.

          The turn server sees only locally encrypted files and your IPs (and it is used only IF you are behind a NAT).

          As far as I see, there is no way for anything bad happening, but I am happy to learn if you know something. If you need it for a proof, I’d gladly give you some of my IPs and encrypted files - see what you can do with them.

          • llii@discuss.tchncs.de
            2·
            2 days ago

            My concern is has more to do with metadata, wich can be collected. If there’s a local alternative or a self-hosted one for something, I’m more inclined to use these than something that depends on a third party.

            • Deckweiss@lemmy.world
              31·
              3 days ago

              The file does not get uploaded to remote servers. It passes through them, fully encrypted, and the server does not have the keys to decrypt your files.

              • kekmacska@lemmy.zipEnglish
                1·
                23 hours ago

                If it passes through, that means it is present on the server’s storage, even if for a short period of time

                • Deckweiss@lemmy.world
                  1·
                  20 hours ago

                  All your data and traffic passes through various routers and servers (both of which are computers and have memory) while you do anything on the internet (You can find the list of such computers by doing a traceroute). But because it is end to end encrypted - you don’t care.