3 ms·
the decryption key never leaves the browser. Maybe it's not perfect, but I'm not using the keywords because it's trendy, this project started out of an interest
by tony_codes 4y ago
the decryption key never leaves the browser. Maybe it's not perfect, but I'm not using the keywords because it's trendy, this project started out of an interest in more secure authentication and data security.
- baby 4y agoBut zero knowledge cryptography has nothing to do with that. Sorry I was a bit harsh, I guess I got tripped by the misuse there.
- tony_codes 4y agoit's ok, it's hacker news so I expected honesty which I appreciate. But What would you call an authentication mechanism which never passes the decryption key off the browser? It's an improvement over systems that handle the keys themselves on the server side.
- baby 4y agoI'm not sure, I would call that encrypted storage perhaps? Or client-side encryption
- tony_codes 4y agoyeah, perhaps client-side encryption or User encryption ownership or something along those lines. To me, "encrypted storage" doesn't sound like anything different that what is done with normal authentication methods.