Paaster – Secure by default end to end encrypted pastebin

Re:Paaster – Secure by default end to end encrypted pastebin by dane-pgp on Friday March 18, 2022 @01:23AM (#30718995)

> Can I trust a instance of paaster not hosted by me?

> No. Anyone could modify the functionality of paaster to expose your secret key to the server. We recommend using a instance you host or trust.

That's refreshingly honest, but I hope that some day a technology like WhatsApp / Cloudflare's recently released "Code Verify" extension helps to solve this.

https://inside.com/campaigns/inside-dev-2022-03-11-31674/sec...

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by derefr on Friday March 18, 2022 @04:31AM (#30719816)

AFAICT you could permanently trust a webapp loaded from an IPFS-scheme URI (as e.g. Brave can do), after it’s been audited once.

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by fastball on Friday March 18, 2022 @04:43AM (#30719886)

But then if you're using an IPFS gateway instead of hosting your own instance then the gateway could serve you different content, no?

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by fwtf on Friday March 18, 2022 @05:18AM (#30720049)

Since you request data by a hash, and your software should verify the downloaded data has the same hash, no.

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by stavros on Friday March 18, 2022 @05:36AM (#30720143)

If you're using a gateway, you have to trust the gateway.

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by arlort on Friday March 18, 2022 @05:53AM (#30720244)

You could probably have a pretty light wrapper around the gateway which verifies the hash.

It wouldn't be as easy as simply using a gateway but still much easier than hosting/implementing an IPFS node locally

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by stavros on Friday March 18, 2022 @05:55AM (#30720257)

Well, to use the node locally you just run a binary, it's not like there's much to it.

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by fastball on Friday March 18, 2022 @06:22AM (#30720399)

No, but getting at content can sometimes take a while if it's not very actively seeded, e.g. I've had to wait hours for images to load on IPFS.

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by stavros on Friday March 18, 2022 @06:32AM (#30720456)

Yes, definitely. Discovery with IPFS is abysmal.

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by jimsi on Friday March 18, 2022 @03:13AM (#30719402)

I think that providing API to be used by standalone clients is far more better approach

[ Parent | on HN ]