With Django, I'm doing a file transfer website. One use will upload a file and then the recipient will download the file.
I want to encrypt this file securely so that the encryption key is not stored on the server.
I understand how end-to-end encryption works, but I can't achieve this with a Django website since you need to store a private key on a device (websites can't do this, unless you know a way to do this).
It must not be password based (that is a premium feature in my website).
One solution I have thought of is storing the encryption key in the URL since anyone that has access to the URL has access to the file anyway. Is this secure?
How can I encrypt a file when it is uploaded to the server, then somehow decrypt the same file in the recipients end without having to store the encryption key.