Out of interest: why did you implement SRP and did not wait till OPAQUE is finished? And do you plan to implement OPAQUE in the future (tm)?

Before implementing SRP, our authentication flow relied on email verification.

The general inconvenience of waiting for emails aside, this flow also had the potential to lock out customers who were using Ente Auth to store their email's 2FA credentials. So it was important that we fixed this.

Once OPAQUE becomes more mainstream, we will very likely adopt it.

I want to thank you all for open sourcing the Ente server and for supporting desktop Linux. Even though I already had a working photo backup solution that fulfilled my privacy criteria, I've switched over to Ente with a paid subscription to show my support.

That's really kind of you, thank you!