Ask HN: What about a community-driven paste service?

Re:Ask HN: What about a community-driven paste service? by arkitaip on Friday September 07, 2012 @12:08PM (#4489783)

I often use pastebins to send passwords (instead of emailing them) and would like it if the url was destroyed after being opened or after x minutes. Obviously you would need SSL for this to work.

I would really need to know exactly what you mean by client side encryption. In its current incarnation I wouldn't use YAAP to send anything sensitive since I don't know how safe it is.

Btw, the URLs are way too long. Any possibility of shortening them?

[ Parent | on HN ]

Re:Ask HN: What about a community-driven paste service? by seyz on Friday September 07, 2012 @12:19PM (#4489835)

I totally agree about the "burn after reading" feature or about "Burn after X secs".

Before sending the content:

1) The paste text is encrypted using aes-256-cbc algorithm.

2) A secure random token (a simple ID) is generated.

3) The secure random secret key is generated.

4) The url will be http://yaap.it/paste/<ID>#<secret_key>;

5) The encrypted content and the ID is sent to the server. The anchor (the secret key) is never sent !

6) When you give the url to someone, the ID and the secret key is still in the url. So the content can be decrypted (client-side too) thanks to this information.

To shorten the paste url, you can use an external service. BUT, the external service will have the secret key. It depends on what you want. Maybe an idea ?

[ Parent | on HN ]