Is this recommended or a good/normal practice? I think not.
Because I saw that OwnCloud stores all encryption keys in one directory on the server. One directory contains the private key(s) and one all public keys.
But their documentation says about their encryption: "But you should make sure to never lose this password, because that’s the only way to recover users’ files."
This seems totally wrong and unprofessional to me.
Or is there any good reason why both are stored there?
https://github.com/owncloud/core/blob/master/apps/files_encryption/lib/util.php#L60 All keys are in the main data directory, not in a special key directory somewhere else