News for hackers. Stuff that matters.

A comment on Skiff – Privacy-first end-to-end encrypted email. Parent comment

Re:Skiff – Privacy-first end-to-end encrypted email by onereplyac on Wednesday August 23, 2023 @03:19AM (#37232803)
Normal email proiders don't dowbload all emails whenever a user logs into a new device
[ Parent | on HN ]
Re:Skiff – Privacy-first end-to-end encrypted email by amilich on Wednesday August 23, 2023 @12:51PM (#37238846)
We also don't do this. In a near future implementation you can just synchronize the end-to-end encrypted search index.
[ Parent | on HN ]
Re:Skiff – Privacy-first end-to-end encrypted email by onereplyac2 on Wednesday August 23, 2023 @01:03PM (#37238995)
You mean you currently do this but plan not to in the future
[ Parent | on HN ]
Re:Skiff – Privacy-first end-to-end encrypted email by raggi on Wednesday August 23, 2023 @11:14PM (#37244599)
This step is what I was expecting you to talk about, and it has some tricky subtleties to get right, which is why I looked for it in the whitepaper.

A trivial problem with a naive implementation is being able to perform presence proofs using side channel information: send someone mail containing a terms you want to verify, and watch for the associated high level costs affecting operations that are likely to be incremental index change uploads.

[ Parent | on HN ]