Show HN: Userbase – Add user accounts and persistence to your static site

Re:Show HN: Userbase – Add user accounts and persistence to ... by prophesi on Saturday January 25, 2020 @04:06PM (#22148618)

Old isn't a valid critique with crypto; 2048-bit DH is verifiably secure.

[ Parent | on HN ]

Re:Show HN: Userbase – Add user accounts and persistence to ... by j-berman on Saturday January 25, 2020 @04:59PM (#22148891)

I thought that old + verifiably secure combine for the safest property in a crypto algorithm

[ Parent | on HN ]

Re:Show HN: Userbase – Add user accounts and persistence to ... by tuxxy on Monday January 27, 2020 @06:07AM (#22158289)

Old is entirely a valid critique of crypto; it demonstrates the authors aren't familiar with modern privacy tooling which tells me a lot.

[ Parent | on HN ]

Re:Show HN: Userbase – Add user accounts and persistence to ... by j-berman on Monday January 27, 2020 @02:00PM (#22162569)

We looked at libsodium and its choices impacted our discussions on our system. We decided not to use it because it's not compatible with many browsers [0]

We also discussed using a modern asymmetric key algorithm. We decided on Diffie-Hellman because we were extremely confident it's secure (so long as we choose the right parameters and implement it correctly), and would be very simple to fit it into our architecture.

[0] https://github.com/jedisct1/libsodium.js/#compatibility

[ Parent | on HN ]

Re:Show HN: Userbase – Add user accounts and persistence to ... by prophesi on Tuesday January 28, 2020 @03:02PM (#22173484)

I know this thread's a bit old now, but could you expound on what the implications are for that?

[ Parent | on HN ]