3 ms·
Similar programs I have seen hides the secret in the URL fragment, so it was never sent over the wire. However, you have a server side redirect from the invite
by derekzhouzhen 5y ago
Similar programs I have seen hides the secret in the URL fragment, so it was never sent over the wire. However, you have a server side redirect from the invite link; what guaranty that the secret is not leaked?
Also, can you implement open graph based link preview? I guess it is hard to do that in the context of E2E.
- macondorivers 5y agoOnly the public keys are transferred over the wire - nothing secret. The private keys and derived symmetric keys remain private in the original browser they were created in. Do you mean open graph based link previews for invite links? What information would you want the previews to contain outside the current metadata? Thanks for your questions!
- derekzhouzhen 5y agoNo, I mean open graph based link preview for whatever people would send in the chat. It is very common for people to send links in chat.
- macondorivers 5y agoAh understood. It’s not on the immediate roadmap but if enough users requested it we’d look into it. So far our users have been most interested in things like forward secrecy, so that was the latest release.