Show HN: Self destructing, encrypted messaging with file upload

Re:Show HN: Self destructing, encrypted messaging with file ... by gry on Sunday August 31, 2014 @02:24AM (#8248591)

1. I think the best option is for the client to encrypt using a local library, like NaCl before sending anything to the server. The server should not provide the encryption algorithm. The client and server must agree in the algorithm, but neither provide it.

2. Yes, it defers trust and responsibility. Now Mozilla, Google, Apple, Microsoft, and Opera are on the lam for issuing a competent browser encryption.

The messed up thing is, all it does is defer trust. What I'm trying to say about the current state of client-side web crypto as far as I understand it, deferring trust doesn't do a damned thing. It's still the source of the crypto lib, which is you.

EDIT: clarity

[ Parent | on HN ]

Re:Show HN: Self destructing, encrypted messaging with file ... by superuser2 on Sunday August 31, 2014 @03:10AM (#8248661)

OT, but: on the hook. On the lam means you are trying to escape (re)capture by the legal system.

[ Parent | on HN ]

Re:Show HN: Self destructing, encrypted messaging with file ... by gry on Sunday September 07, 2014 @11:39PM (#8283343)

Thanks, you're right. I've misused the word for ages.

[ Parent | on HN ]