Are there any considerations for 2FA?
@dafyre We've already added support for 2FA support in our latest major release. We officially support hardware two-factor auth using U2F and TOTP. See https://apps.nextcloud.com/?order_by=name&ordering=asc&is_featured=true.
Hey there!
My name is Lukas, I have been contributing to the ownCloud/Nextcloud code since 2012. Which in conclusion means that I am responsible for many of the security hardenings and features in the code. So if you ever saw an annoying security warning such as the "Trusted Domain Warning", then you can probably blame me for this 
Before I worked as security assessment and forensic investigator. Which means reviewing security, giving trainings and dealing with breaches at Fortune 500 companies. Personally, I do however believe that I have a way bigger impact by helping securing one of the most fascinating open-source projects out there.
I happen to live in Switzerland, which probably shows you how distributed the Nextcloud team actually is 
And because Jos just asked for it a few minutes ago: My favourite color is certainly "pink", my first pet was named "Dieter" and my mothers maiden name is "Müller". Figure if that helps you answering the password reset questions
Cheers
Lukas
Have you heard of SQRL authentication and have you investigated including it?
I happen to have heard about it but we didn't look into that. In terms of authentication, at the moment we're working on actively improving our SSO plugin which now also supports Kerberos for example.
As Nextcloud is quite modular adding another authentication module via API should be quite easy. If you're interested in adding support SQRL authentication and have some PHP knowledge, I'd recommend to join us on help.nextcloud.com in the developers forum or on IRC #nextcloud-dev in Freenode.
@JaredBusch said in Nextcloud AMA!!:
Has anyone from there reached out to you about this to ensure things like download links always work, etc?
Never heard of chocolatey.org myself but our download links should actually stay valid.
@JaredBusch said in Nextcloud AMA!!:
I noticed that with version 11 there are some issues with compatibility in the Android app and that it is now required to migrate to the NextCloud app.
Are there any compatibility issues yet with the desktop sync clients? Changing all users once I migrate the server is a non-trivial task.
The ownCloud 2.2 and 2.3 desktop client should be completely compatible with Nextcloud. So you can easily migrate this over time.
@IRJ said in Nextcloud AMA!!:
Are noticeably slower speeds typical for external storage browsing on NextCloud?
That should normally not be the case, at least not for common external storages such as SMB. Can you elaborate a bit what kind of external storage you're using? Also we have support for SMB update notifications as described at https://docs.nextcloud.com/server/11/admin_manual/configuration_files/external_storage/smb.html
Configuring that may make a huge impact. Also make sure you're on the latest release.
@JaredBusch said in Nextcloud AMA!!:
With NextCloud, you have decided against doing a repository based model and have an auto updater.
Why is this being done this way? What possibly administration benefit do I gain from it?
Technically we're not against repositories at all. They are a nice feature, but with all the distributions out there this leads to a lot of additional work and testing. At the moment we feel we can focus our resources better on other stuff. But all help is obviously appreciated!
Note that we also ship a simple PHAR file that allows scriptable updates. So you can execute a simple "php updater/updater.phar" to replace the source code and also run the migration scripts. I think that's also a nice way for sysadmins to automate updates and deployments.
Are there any considerations for 2FA?
@dafyre We've already added support for 2FA support in our latest major release. We officially support hardware two-factor auth using U2F and TOTP. See https://apps.nextcloud.com/?order_by=name&ordering=asc&is_featured=true.
Have you heard of SQRL authentication and have you investigated including it?
I happen to have heard about it but we didn't look into that. In terms of authentication, at the moment we're working on actively improving our SSO plugin which now also supports Kerberos for example.
As Nextcloud is quite modular adding another authentication module via API should be quite easy. If you're interested in adding support SQRL authentication and have some PHP knowledge, I'd recommend to join us on help.nextcloud.com in the developers forum or on IRC #nextcloud-dev in Freenode.
Hey there!
My name is Lukas, I have been contributing to the ownCloud/Nextcloud code since 2012. Which in conclusion means that I am responsible for many of the security hardenings and features in the code. So if you ever saw an annoying security warning such as the "Trusted Domain Warning", then you can probably blame me for this
Before I worked as security assessment and forensic investigator. Which means reviewing security, giving trainings and dealing with breaches at Fortune 500 companies. Personally, I do however believe that I have a way bigger impact by helping securing one of the most fascinating open-source projects out there.
I happen to live in Switzerland, which probably shows you how distributed the Nextcloud team actually is And because Jos just asked for it a few minutes ago: My favourite color is certainly "pink", my first pet was named "Dieter" and my mothers maiden name is "Müller". Figure if that helps you answering the password reset questions
Cheers
Lukas