Something isn’t quite right on this page.
The minimum requirements mention:
“Must use standard, audited encryption.”?
I am assuming we imply e2ee here, else what relevant encryption are we talking about?
Then the card of photoprism itself contains the text “It does not include E2EE, …”
This is for cloud-hosted providers. But the wording of the criteria could be changed.
Yeah i guess you are right. But given ente is also self hostable…
I am not sure it makes sense to recommend solutions that do not have e2ee.
Ente is not e2ee? 
nobody said that and no they have.
Probably TLS for the sync portion. This requirement feels like something @dngray might’ve added so I’ll ask him here if he knows. E2EE is already covered by the first requirement:
- Cloud-hosted providers must enforce end-to-end encryption.
Might be able to just remove the line you mentioned as redundant, since it seems like it’s already covered by the line above.
Sounds right to me
The reason photo-prism was allowed was because it could be self hosted. There are relatively few products in this space with any kind of E2EE though so we could relax that criteria.
Sounds good to me 