FileKit: An open source end-to-end encrypted cloud storage service in JavaScript

Re:FileKit: An open source end-to-end encrypted cloud storag... by tptacek on Thursday August 29, 2019 @03:34PM (#20832823)

There's no difference between trusting the server to deliver Javascript cryptography source code and trusting the server with your secrets. The server can just deliver code (in a number of different ways) to compromise those secrets.

[ Parent | on HN ]

Re:FileKit: An open source end-to-end encrypted cloud storag... by danShumway on Thursday August 29, 2019 @04:56PM (#20833572)

Well... there's no technical difference.

My understanding from the Apple/FBI fiasco is that it's an open question whether the US government is legally able to compel you to write and deliver custom code to your clients. But any local judge can issue you a warrant to hand over encrypted customer data that you're holding the key to.

But IANAL, maybe my take on that is overly simplistic.

[ Parent | on HN ]