3 ms·
Looks really great but E2EE is important to me. Also this: > data is not encrypted at rest [0] I realise this is a one-person startup, but personally I would
by tailspin2019 5y ago
Looks really great but E2EE is important to me.
Also this:
> data is not encrypted at rest [0]
I realise this is a one-person startup, but personally I would want more focus around privacy and security for a new messaging app. It’s going to be a key requirement for a lot of people I think.
Being a one person startup, this is even more important, as the “company” behind this is likely not to have the same level of security measures that a larger company would have (I know this is an assumption but it’s a reasonable one).
I absolutely love the concept and the execution so far looks great. We do need a messaging app like this!
[0] https://www.ponymessenger.com/privacy https://www.ponymessenger.com/privacy
- dmitryminkovsky 5y agoThanks so much. Sorry for the slow reply! I'm sorry this doesn't have at-rest encryption, much-less E2EE. I totally understand. As I wrote elsewhere, the best I can do is be transparent about that. I'm a solid fullstack dev, but it would be dishonest to represent to people that I can cryptographically secure their information against a sophisticated adversary. I hope that Pony grows such that I can retain or hire a reputable expert who may be able to assist with that, so that I could market encryption in good faith.
- tailspin2019 5y agoI get what you're saying, but it doesn't take much cryptographic know-how to at least enable encryption at the database level. Just something to think about... Good luck!