3 ms·
> I'd personally argue that's a security dark pattern - make privacy a big selling point, but then don't activate the security by default I think it's a great
by znpy 2y ago
> I'd personally argue that's a security dark pattern - make privacy a big selling point, but then don't activate the security by default
I think it's a great approach instead: the secure, end to end encryption is there and it's ready to be used.
You can easily activated it but you aren't burdened by it for 99% of the time when e2e encryption is not needed.
- input_sh 2y ago> You can easily activated it but you aren't burdened by it for 99% of the time when e2e encryption is not needed. So, in those 1% of the cases when you actually need it, you're instantly flagging yourself as doing something fishy? Because if it ever comes down to it, good luck proving otherwise in a court. That's like the whole point of why it should be on by default. Not because me making dinner plans is something super-secret that needs to be e2e-encrypted, but because those two scenarios need to be indistinguishable from each other for e2e to be effective.
- seanhunter 2y agoYes. Additionally you are at bare minimum signalling that the metadata of the encrypted comms is worth further analysis. For exactly the same reason if you have a paper shredder, you don't only shred confidential material, you shred a bunch of junk as well to make it harder to find which pieces to reconstruct.