News for hackers. Stuff that matters.

A comment on Ntfy.sh – Send push notifications to your phone via PUT/POST. Parent comment

Re:Ntfy.sh – Send push notifications to your phone via PUT/POST by binwiederhier on Tuesday November 08, 2022 @08:19AM (#33518625)
End to end encryption is already fully designed and partially implemented. I just had a baby and have no time to do it recently: https://github.com/binwiederhier/ntfy/issues/69
[ Parent | on HN ]
Re:Ntfy.sh – Send push notifications to your phone via PUT/POST by kbns on Tuesday November 08, 2022 @08:20AM (#33518639)
will check. congratulations.
[ Parent | on HN ]
Re:Ntfy.sh – Send push notifications to your phone via PUT/POST by shivam543 on Tuesday November 08, 2022 @09:40AM (#33519445)
If I run ntfy behind NGINX reverse proxy which is on https, isn't that E2E encrypted due to https?
[ Parent | on HN ]
Re:Ntfy.sh – Send push notifications to your phone via PUT/POST by adamckay on Tuesday November 08, 2022 @10:37AM (#33520122)
No, because your Nginx server decrypts that TLS connection so can access the plaintext data. This is typically called encrypted-in-transit.

E2EE means that it's always encrypted from the sending device to the receiving device and nothing in the middle (including the service operator) can read it.

[ Parent | on HN ]
Re:Ntfy.sh – Send push notifications to your phone via PUT/POST by donatzsky on Tuesday November 08, 2022 @10:37AM (#33520129)
E2E implies that the data itself gets encrypted by the sender and is only decrypted by the receiver. With https, the "pipe" is encrypted, but the data is not and the server will get the plain-text.
[ Parent | on HN ]