News for hackers. Stuff that matters.

A comment on Show HN: Retriever – Securely share secrets over the internet. Parent comment

Re:Show HN: Retriever – Securely share secrets over the inte... by SamBam on Wednesday January 24, 2024 @05:45PM (#39123638)
No, I think the question is: if you're passing the URLs via email, WhatsApp, or anything else, then if that system is compromised then you've revealed the secret.

If you trust that system not to be compromised, then you may as well have just sent the secret plain-text.

In what way or in what scenario does this ever grant you MORE secrecy?

[ Parent | on HN ]
Re:Show HN: Retriever – Securely share secrets over the inte... by Twisell on Thursday January 25, 2024 @01:06AM (#39126682)
As per the documentation the secret is never shared unencrypted an the private key to decypher it is never ever in the url. It stay in the receiver local storage.
[ Parent | on HN ]
Re:Show HN: Retriever – Securely share secrets over the inte... by rakoo on Thursday January 25, 2024 @07:27AM (#39128827)
This only means the browser, and the javascript code, are part of the chain. Both of them can also be compromised, have bugs, and leak the secret.
[ Parent | on HN ]