News for hackers. Stuff that matters.

A comment on Show HN: Write a private diary using good old email.

Re:Show HN: Write a private diary using good old email by Dyaz17 on Tuesday January 14, 2020 @10:56AM (#22045964)
Great job. Here is what I propose to make it more secure and prevent you from being able to read anyone diary...

I propose that each day a link/token is sent to your email. The link then ask for a password that is handled only with client side javascript and does the encryption of the data before sending it do the server. Look at what Blockhain.info or myetherwallet is doing for client side encryption. Maybe also propose provide all the front end as opensource and provide a way for people to host their own front (a few HTML, JS files where you input the link or token sent to you by email...)

[ Parent | on HN ]
Re:Show HN: Write a private diary using good old email by kossnocorp on Tuesday January 14, 2020 @11:05AM (#22046059)
Thank you!

My goal wasn't to create a 100% secure diary. If you need that, you probably should not store your data in the cloud. That's unlikely that I will ever try to make it happen. But even if I would, there're so many ways to screw it over anyway, so I won't ever try to make this promise.

However, I will consider open-sourcing it.

Also see my comment where I addressed the privacy issue: https://news.ycombinator.com/item?id=22045670

[ Parent | on HN ]
Re:Show HN: Write a private diary using good old email by jlelse on Tuesday January 14, 2020 @11:36AM (#22046421)
Open sourcing it (and allowing to self-host it for personal and private use) would be awesome!
[ Parent | on HN ]