3 ms·
noted. in the coming weeks we'll be more transparent about the tech stack. in the meanwhile, sure, we don't store private keys on the server side :)
by monicaincog 3y ago
noted. in the coming weeks we'll be more transparent about the tech stack.
in the meanwhile, sure, we don't store private keys on the server side :)
- imuli 3y agoIn the login response I see the private key being sent back from the server, it looks like it is encrypted with a key derived from the user's password. 100100 iterations of PBKDF2-SHA512 is certainly better than it could be, but not it's certainly not as secure against brute force attacks as Argon2 or any other modern KDF.