News for hackers. Stuff that matters.
Re:Ask HN: End-to-end encrypted online spreadsheet tool by tptacek on Monday October 15, 2018 @05:59PM (#18224215)
Why are you trying to encrypt online spreadsheets? It's very unlikely that you're going to get much operational security out of the encryption features in a spreadsheet application; you will get far more security out of careful use of sharing and authorization controls, which are things you can get from Google Docs and not so much from other platforms.

Remember too, if the tool you're looking at works entirely in a browser, without an extension (sometimes even with an extension!), it's not "end-to-end encrypted"; it's as encrypted as the server wants you to be as you run it.

Re:Ask HN: End-to-end encrypted online spreadsheet tool by kanjus on Tuesday October 16, 2018 @03:21AM (#18227331)
I should have specified my threat model above, I'd ideally want zero-knowledge encryption on all tools, since Google is a threat in my model: assume that the NGO has a database of whistleblowers that needs protection
Re:Ask HN: End-to-end encrypted online spreadsheet tool by colejohnson66 on Monday October 15, 2018 @09:31PM (#18225688)
Even if the encryption and decryption is done client side like with Mega?
Re:Ask HN: End-to-end encrypted online spreadsheet tool by ekiru on Wednesday October 17, 2018 @02:39AM (#18236675)
Yes, the server can straightforwardly, any time you load the application, serve to you (including to specifically you, a single target, making it much less likely to be noticed), a modified version of the JavaScript powering that client-side encryption which will send the plaintext off to the server.