Re:Monod, our secure and offline-first Markdown editor, is o...
by raimue on Wednesday April 20, 2016 @08:25AM
(#11533833)
At first I was a bit puzzled why anyone would need to describe an editor as "secure"... but oh well, it is actually a web application. I can see the need now.
[ Parent
| on HN ]
Re:Monod, our secure and offline-first Markdown editor, is o...
by sitkack on Wednesday April 20, 2016 @12:08PM
(#11535417)
I cannot vouch for the security the editor mentioned here, but anything that handles external data has security concerns.
https://www.cvedetails.com/vulnerability-list/vendor_id-8218...
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3075
Re:Monod, our secure and offline-first Markdown editor, is o...
by kybernetikos on Wednesday April 20, 2016 @06:15PM
(#11538144)
Did you read the article? It's an interesting way of making a rich shareable document that is readable by those you share the link with and not by anyone else, including those who operate the server, or those on the network route to you.
Well, that's the principle, I didn't look closely enough to see if their implementation can be trusted, but it's a fun idea.
Re:Monod, our secure and offline-first Markdown editor, is o...
by RadioactiveMan on Thursday April 21, 2016 @01:34AM
(#11539897)
Since the encryption key is in the URL I don't think it's fair for them to claim they can't decrypt.
Re:Monod, our secure and offline-first Markdown editor, is o...
by willdurand on Thursday April 21, 2016 @02:40AM
(#11540092)
It is in the hash/fragment of the URL, that part is client side only and is never sent to the server.