[Help Wanted] Question: Are files encrypted at rest on storage backends (Discord/R2/Telegram)?
#647 opened on Jul 23, 2026
Repository metrics
- Stars
- (5,635 stars)
- PR merge metrics
- (PR metrics pending)
Description
Self-check / 自查
- I have already read the document and checked my relative settings / 我已经仔细阅读文档并检查了有关设置
Confirm / 确认
- I have searched the Issue and found no related issues / 我已经搜索过Issue,没有找到相关问题
- I am using the latest source from this repository / 我使用的是来自此仓库的最新版代码
- I provided information which does not include sensitive information / 我提供的信息里不包含敏感信息
Problem Description / 问题描述
(Pardon me I can't read Chinese so I can't really check if this is duplicated or not)
I have a question regarding file storage security. I'm currently evaluating CloudFlare-ImgBed for my use case, and I would like to know:
Are files stored in encrypted form (as encrypted blobs) on the storage backends, such as Discord, Cloudflare R2, and Telegram?
Specifically, if someone gains direct access to the backend storage (e.g., accesses my R2 bucket directly, or joins the Telegram channel where files are stored), would they be able to see and download the raw, original files? Or are the files encrypted before being uploaded to these backends?
From my review of the documentation and source code, I couldn't find any mention of client-side or server-side encryption for stored files. It seems that the security measures in place focus on access control (authentication, IP whitelisting, etc.) rather than data encryption at rest.
Upload Method / 上传方式
Upload Channel / 上传渠道
Additional Materials / 辅助材料
No response