I was just wondering why bucket names are not encrypted in a share link?
For 1. they might reveal additional unwanted information.
For 2. they might help to gain access to additional ressources unintended.
I have a share link which is
Now if someone comes to know that I have also ‘fireplace’ videos he could simply try:
and gain access to the bucket. I guess most will use some kind of organizing structuring names for buckets, meaning that if you know one you can guess/know all (like test0, test1, test2 etc. and oh look what
On the other hand, if the bucket name was encrypted, somebody who knows the sintel link and even manages to find out there must be a fireplace bucket, he would not be able to access it easily, because he would not be able to change the URL to the correct encryption value. (Surely someone could try to bruteforce it but that would be possible with clearnames as well)
So the question remains, why bucket names are not encrypted and if that would not add additional security against unwanted exposure of data.