5 ms·

How does the browser communicate with the phone? Does it require an intermediary server that krypt.co runs?

• dijit 8y ago
  Yeah, it's using Amazon SQS. It's listed in their docs.
  • maherbeg 8y ago
    Ah, yeah I see it now. It wasn't listed in the FAQ which would be useful. That's a slight bummer because now there's another service dependency in your authentication flow. It's probably pretty rare that SQS will go down, but still is a bummer.
  • jiveturkey 8y ago
    oy. I'd assumed there was a browser-side USB->BLE plugin. This is horrible. Now the security of it is tied to the security of the stuff they have running in Amazon. Which they probably don't publish source code for? Even if they do, you have no way to know that is what is actually running. Not the mention reliability and availability concerns. ah well, I had such high hopes.
    • jiveturkey 8y ago
      After investigation, I have to retract my complaint. The browser-side agent is paired with your phone, Apple style. It's not a Google-style arrangement where you pair with Google and Google pairs with you, ie Google is in the middle. So as long as the source code for both parts (browser-side and phone-side) is there, and you can audit that the code viewable is the code installed, this is pretty solid. Of course the reliability and availability issue is still there.