News for hackers. Stuff that matters.
Re:Show HN: Working on a Zero-Knowledge Daily Journaling App by avinassh on Tuesday January 31, 2023 @10:58AM (#34596771)
what does Zero-knowledge mean and how it is different from end to end encrypted?
Re:Show HN: Working on a Zero-Knowledge Daily Journaling App by tony_codes on Tuesday January 31, 2023 @11:31AM (#34597319)
The main thing is that the encryption keys never leave the browser. So even an engineer in control of the backend cannot see the information being saved. With E2E encryption the owner of the data usually also handles the decryption keys.
Re:Show HN: Working on a Zero-Knowledge Daily Journaling App by cracked-behem on Tuesday January 31, 2023 @11:52AM (#34597597)
Aren't the engineers controlling the backend also controlling the frontend? What's stopping the frontend from exfiltrating the encryption keys?
Re:Show HN: Working on a Zero-Knowledge Daily Journaling App by baby on Tuesday January 31, 2023 @11:52AM (#34597604)
Zero knowledge means that you can convince someone that you know something without showing them that something.

More info on https://en.m.wikipedia.org/wiki/Zero-knowledge_proof

I have a feeling that this is not zero knowledge and we’re all getting bamboozled.

Re:Show HN: Working on a Zero-Knowledge Daily Journaling App by thewataccount on Tuesday January 31, 2023 @11:56AM (#34597662)
Yes, everyone started miss-using zero knowledge when they mean E2EE.

Including several password managers and companies I hoped would have known better.