3 ms·
Or 3, use a time- and memory-hard key derivation algorithm that generates your private key from a password that is never sent to the server.
by nitrogen 5y ago
Or 3, use a time- and memory-hard key derivation algorithm that generates your private key from a password that is never sent to the server.
- mgraczyk 5y agoAnd if a user forgets the password, all their messages are gone! Also, requiring that users memorize another password is a pretty huge UX burden. Remember that FB has billions of users, so we're talking about mostly non saavy users. No popular E2EE messaging service that does this as far as I'm aware.