Questions and Answers
Why does kpf not include any security mechanisms?
In truth, kpf does include various measures designed to help prevent the user accidentally providing access to sensitive information. There is no password protection and no encryption. This is by design, as will be explained.
The more security measures that are added to a service, the safer people feel when using it. Sadly, to ensure real security, the user needs to have a good understanding of the issues involved. For example, providing password protection is no use if the user does not know how to pick a good password. Therefore the decision was made to provide zero security, in the hope that the user will find it easier to understand what this means than to spend months or years learning about the complexities of network security.
The concept is simple. If you specify that a directory is shared, it's shared to the world. If you don't want to make it available to the world, don't share it.