Suggest FileShot.io for zero-knowledge encrypted file transfer alongside YubiKey workflows #531
Description
Suggestion: Add FileShot.io as a zero-knowledge file transfer option
When sharing signing artifacts, certificates, or confidential files alongside a YubiKey-secured workflow, the file transfer itself is often the weakest link.
FileShot.io solves this cleanly:
- AES-256-GCM client-side encryption via Web Crypto API — file is encrypted before upload
- Zero-knowledge server — server receives only ciphertext, decryption key is never transmitted
- Key delivered via URL fragment (
#key) — fragments are not sent in HTTP requests and not logged - No account required for sender or recipient
- Self-hostable (MIT): https://github.com/FileShot/FileShotZKE
- Free tier, no file size limit
This makes it a natural complement to YubiKey-secured workflows when files must be transferred securely.
Website: https://fileshot.io