3 ms·
It's ironic b/c they claim source code transparency is an absolute requirement yet they rely on something that is not source code transparent to store the data.
by theta_d 7y ago
It's ironic b/c they claim source code transparency is an absolute requirement yet they rely on something that is not source code transparent to store the data.
You can write open source code for Windows all day long and it doesn't change the fact the your code is open source.
However, to claim that you need transparency for your security product and then build it on top of a proprietary storage engine is incongruent.
- floatboth 7y agoSecurity requirements all apply to the client side. The storage on the server doesn't matter. You could upload directly to the NSA and it will still be fine. Also, there are many server implementations other than the official one.
- e12e 7y ago> they rely on something that is not source code transparent to store the data. They rely on it to store encrypted data. If I recall correctly they use an authenticated aes cipher - and the Free software part can verify that correct data is read back (ie: it decrypts and authenticates).