Explanation

These pages explain how Sternway works and why it is built that way. Read them to understand a decision or to judge whether Sternway fits what you need to protect; for steps to follow, see the How-to guides.

• How the end-to-end encryption works: from your password to the keys that seal each item, and what is encrypted on the device itself.
• Threat model: what holds against a malicious server, the network, a hostile SSH server, a team member, other apps and local malware, and what does not.
• What leaves your device: every feature that sends something, what, where and when.
• How sync and conflicts work: revisions, conflict copies, held removals and refused old versions.
• How teams and trust work: the signed member list, safety numbers, and what removing a member can take back.
• How Sternway keeps your data safe: the promise, snapshots and the sync safety net.
• Licensing of self-hosted servers: what a server offers without a licence and what a licence adds.