How secure is Zotero Storage?

ericeisele

I am aiming this question more at the developers; I am curious to know whether every paid storage account gets their own bucket, and what is in place to ensure that a user doesn't inadvertently get access to the wrong files. Are the items stored on S3 public or private? (can they be accessed outside of Zotero)

dstillman

All files are stored in a single private bucket that only the Zotero server has access to. The Zotero server generates temporary secure S3 URLs authorizing each download and passes them to clients with correct credentials for a user account with access to the given library.