News for hackers. Stuff that matters.

A comment on Show HN: Working on a Zero-Knowledge Daily Journaling App. Parent comment

Re:Show HN: Working on a Zero-Knowledge Daily Journaling App by tony_codes on Tuesday January 31, 2023 @11:31AM (#34597319)
The main thing is that the encryption keys never leave the browser. So even an engineer in control of the backend cannot see the information being saved. With E2E encryption the owner of the data usually also handles the decryption keys.
[ Parent | on HN ]
Re:Show HN: Working on a Zero-Knowledge Daily Journaling App by cracked-behem on Tuesday January 31, 2023 @11:52AM (#34597597)
Aren't the engineers controlling the backend also controlling the frontend? What's stopping the frontend from exfiltrating the encryption keys?
[ Parent | on HN ]