3 ms·
Haven't we already established that crypto served over the internet is not a good idea (because a malicious actor can own the server and provide bad JS)? Also,
by wyager 11y ago
Haven't we already established that crypto served over the internet is not a good idea (because a malicious actor can own the server and provide bad JS)?
Also, does this actually use the OTR protocol?
- crodjer 11y agoNo, it doesn't actually use the OTR protocol. The application actually follows this flow: https://github.com/crodjer/qotr/blob/master/FLOW.rst#how-qotr-works https://github.com/crodjer/qotr/blob/master/FLOW.rst#how-qot... I understand the name is confusing. I was a long way into naming everything about the project QOTR before I realised that OTR is best used if the protocol is implemented, instead of taking it as general concept. I plan to re-write the application (at least the front-end, which does all the encryption stuff) based on the reviews and if people think that it is actually an idea worth pursuing.
- crodjer 11y agoUpdated this as a notice on the project README.