3 ms·
Show HN: Discryptor.io – Discord Chat End-to-End-Encryption
- meowtastic 4y agoDidn't know Discord doesn't encrypt messages. How do you go about doing it then? If I send a message, wouldn't it automatically go to Discord's server?
- brianjking 4y agoJust wait until you find out your Discord token is stored in plaintext in your browser, and if you have it compromised it bypasses your 2FA and password.
- discryptor 4y agoThat is indeed another vulnerability of Discord. Discryptor doesn't even require you to be logged into your Discord account (except for the authentication every now and then).
- discryptor 4y agoNope, it gets encrypted in the Discryptor client first, then sent to the Discord bot, which forwards the encrypted message it to the recipient.
- Rovoska 4y agoWhat is your explanation for using RSA instead of something modern?
- discryptor 4y agoI'm familiar with RSA and it is still considered secure. So for the proof of concept I was happy with it. Of course it could be replaced in the future.