Re:Ask HN: End-to-end encrypted online spreadsheet tool
by kanjus on Tuesday October 16, 2018 @03:21AM
(#18227331)
I should have specified my threat model above, I'd ideally want zero-knowledge encryption on all tools, since Google is a threat in my model: assume that the NGO has a database of whistleblowers that needs protection
Re:Ask HN: End-to-end encrypted online spreadsheet tool
by colejohnson66 on Monday October 15, 2018 @09:31PM
(#18225688)
Even if the encryption and decryption is done client side like with Mega?
Re:Ask HN: End-to-end encrypted online spreadsheet tool
by ekiru on Wednesday October 17, 2018 @02:39AM
(#18236675)
Yes, the server can straightforwardly, any time you load the application, serve to you (including to specifically you, a single target, making it much less likely to be noticed), a modified version of the JavaScript powering that client-side encryption which will send the plaintext off to the server.
Remember too, if the tool you're looking at works entirely in a browser, without an extension (sometimes even with an extension!), it's not "end-to-end encrypted"; it's as encrypted as the server wants you to be as you run it.