3 ms·
you could type the key into each client each time, no? isnt that how things like dashlane work? it sends the encrypted historical blob to your device, your de
by basch 8y ago
you could type the key into each client each time, no?
isnt that how things like dashlane work? it sends the encrypted historical blob to your device, your device decodes it.
- throwawaylolx 8y agoI don't think such unfriendly UX would ever be considered in such a mainstream service
- basch 8y agothe OPTION to start an encrypted chat, with a chat specific password?
- instakill 8y agoOr storing the key in localstorage?
- basch 8y agoi guess by "each time" i was being somewhat ambiguous. it could mean each login, or each install, or each time the session clears.
- yholio 8y agoTo enable end-to-end encryption, you need more than local storage, you need local computation using local execution of signed and reproducible code. Javascript in browsers is fundamentally not such a platform, mobile applications are - to the degree you trust Google, Apple etc.
- shawnz 8y agoYou already have to login with a username and password to access Facebook, unlike whatsapp where your phone is the sole key. Facebook could just construct the key at logon time based on the user's password.