3 ms·
Thanks for that. I had a quick look through their blog but couldn't find anything to reference. It's been a few months since I worked with their codebase but a
by alias_neo 6y ago
Thanks for that. I had a quick look through their blog but couldn't find anything to reference.
It's been a few months since I worked with their codebase but at the time it relied on Intel SGX for the contact storage Enclave, which is now considered compromised[0]. Additionally, if you wanted to run your own, the requirements to get licensed to use the Enclave are non-trivial.
Opinions are my own, I represent no one, etc, etc.
[0]https://arstechnica.com/information-technology/2020/03/hackers-can-steal-secret-data-stored-in-intels-sgx-secure-enclave/ https://arstechnica.com/information-technology/2020/03/hacke...
- Vinnl 6y agoYeah I think that's still true. That said, as I understand it, the enclave is used as "proof" that they're running the server-side code they say they do (which should be protecting the data), not the data itself. I could definitely be wrong there though.
- alias_neo 6y agoYes, that's how I understand it to work; TEE (Trusted Execution Environment).