4 ms·
Your data being inaccessible without a private key or password is the entire point.
by chc4 6y ago
Your data being inaccessible without a private key or password is the entire point.
- drukenemo 6y agoExactly. I cannot understand how this can’t be the user’s choice.
- terpimost 6y agoSearch is a problem. Index is available to a saas provider.
- JoshTriplett 6y agoPeople rightfully get skittish when there's no "forgot password" mechanism to get their account and data back. I certainly agree that that's the point, but such a system needs some potential usability affordances. For instance, a key stored in the browser rather than a password the user has to remember, and ideally a key synced between multiple devices controlled by the user so that the loss or failure of one device does not mean loss of the account. For example, imagine having the browser generate an asymmetric key for the user, and making sure browsers store such keys (encrypted) in Firefox Sync or equivalent, so that the keys are safe even if the user moves to a new device or an existing device fails or gets lost.
- Benmcdonald__ 6y agoHow do you even sync the key between multiple devices? If you send the private key to the server that undoes any protection from the encryption
- JoshTriplett 6y agoFirefox Sync has a model that doesn't trust the server.
- franky47 6y agoYou derive a master key from a password, and use that to encrypt other keys, or a more complex key chain if needed. You then only sync encrypted keys with the server.
- franky47 6y agoI wrote some ideas on how to implement a password reset for end-to-end encrypted apps, reviews and comments are welcome: https://francoisbest.com/posts/2020/password-reset-for-e2ee-apps https://francoisbest.com/posts/2020/password-reset-for-e2ee-...
- mkl 6y agoKeeping an unencrypted local mirror on your own device(s) would solve that problem, as well as potentially the "my data is stuck on their servers" problem. On devices with space for it, I mean, so maybe laptop but not phone by default.