3 ms·
Yes, actually. - If you host your own servers you can still verify. - if you are using well-designed, human-centric software, untrusted servers (read: all ser
by survirtual 4y ago
Yes, actually.
- If you host your own servers you can still verify.
- if you are using well-designed, human-centric software, untrusted servers (read: all servers you do not have control of / cannot audit) would not have any access to private data due to encryption, and clients can be verified to make sure decryption only occurs on the client side
The trouble is, this kind of software is a poison pill to advertising. It will be a long time before it takes over.
- murderfs 4y agoYou say "human-centric", but you really mean "what I want". Many more humans would be upset at being unable to recover their data if they forget their password than would be pleased by this.
- survirtual 4y agoI said human-centric and I most certainly mean it. Humans cannot be trusted to do the right thing when it comes to mass scale, nameless faces. We need to be kept in check, and we have the mathematics to do it. Custodial services can always still exist for those among us that are incompetent.
- jolux 4y ago> would not have any access to private data due to encryption It's pretty difficult to fully scrub yourself of the metadata involved in making a connection to a server. For sure it can be minimized, like Signal does. But this has inherent UX tradeoffs that most people are not willing to make, like requiring you share your phone number to use the service, and not having server-based backup (yet, at least).
- survirtual 4y agoIt is difficult with the way things are now, yes. It will not be difficult for much longer. It was once difficult for me to communicate with you, me being a stranger to you and you being the same, having never met in person. But here we are. We are all experts at solving difficult problems & giving access to those solutions to everyone.