The most secure (from a trust point of view, at least) method of encrypting file is obviously at rest, client-side.
Seafile uses that method, but fails on the implementation on some aspects.
"In-place" encryption versus "volume/disk" encryption both have major drawbacks and are hard to implement correctly.
In case of "in-place", the private key is a possible vulnerability (like leaving the key under the doormat).
In case of disk encryption, while it's mounted, it's worth nothing if (when) you are compromised.
The most secure (from a trust point of view, at least) method of encrypting file is obviously at rest, client-side.
Seafile uses that method, but fails on the implementation on some aspects.
"In-place" encryption versus "volume/disk" encryption both have major drawbacks and are hard to implement correctly.
In case of "in-place", the private key is a possible vulnerability (like leaving the key under the doormat).
In case of disk encryption, while it's mounted, it's worth nothing if (when) you are compromised.