3 ms·

We're going to add TLSNotary support for real cryptographic signing, see my comments below :) Timestamping is also on my roadmap, definitely as a plugin (and l

We're going to add TLSNotary support for real cryptographic signing, see my comments below :) Timestamping is also on my roadmap, definitely as a plugin (and likely paid) as it's more corporate users that really need it. We need to keep some of the really advanced attestation features paid to be able to support the rest of the business.

mikae1 2y ago
Thanks for the box! Any examples of other possible really advanced features that might go for-pay? Is there any chance you will make current free features for-pay? That'd be rather off-putting for me as a home user.
- nikisweeting 2y ago
  No, everything currently free will stay free. The paid stuff currently is: - per-user permissions & groups - audit logging - auto CAPTCHA solving - burner credential management for FB/Insta/Twitter/etc. w/ auto phone based account verification ability - custom JS scripts for expanding comments, hiding pop ups, etc. - managed hosting + support Some of this stuff ^ is going to become free in upcoming releases, some will stay paid. What I decide to make free is mostly based on abuse potential and legal ramifications, I'd rather have a say in how the risky stuff is used so that it doesn't become a tool weaponized for botting.
  - mikae1 2y ago
    Thanks for the clarification and thanks again for the great work!
petertodd 2y ago
> We're going to add TLSNotary support for real cryptographic signing, see my comments below :) Last I checked TLSNotary requires a trusted third party. I would strongly suggest timestamping TLSNotary evidence, to be able to prove that evidence was created prior to any of these trusted third parties being compromised.
- nikisweeting 2y ago
  Of course, TLSNotary stuff would necessarily come with a whole ecosystem, including some sort of transparency log like certificate transparency logs, DNS record keeping, timestamping, etc. But we'll start with the basics and work our way up to completeness.

mikae1 2y ago

Thanks for the box! Any examples of other possible really advanced features that might go for-pay? Is there any chance you will make current free features for-pay? That'd be rather off-putting for me as a home user.

nikisweeting 2y ago
No, everything currently free will stay free. The paid stuff currently is: - per-user permissions & groups - audit logging - auto CAPTCHA solving - burner credential management for FB/Insta/Twitter/etc. w/ auto phone based account verification ability - custom JS scripts for expanding comments, hiding pop ups, etc. - managed hosting + support Some of this stuff ^ is going to become free in upcoming releases, some will stay paid. What I decide to make free is mostly based on abuse potential and legal ramifications, I'd rather have a say in how the risky stuff is used so that it doesn't become a tool weaponized for botting.
- mikae1 2y ago
  Thanks for the clarification and thanks again for the great work!

petertodd 2y ago

> We're going to add TLSNotary support for real cryptographic signing, see my comments below :) Last I checked TLSNotary requires a trusted third party. I would strongly suggest timestamping TLSNotary evidence, to be able to prove that evidence was created prior to any of these trusted third parties being compromised.

nikisweeting 2y ago
Of course, TLSNotary stuff would necessarily come with a whole ecosystem, including some sort of transparency log like certificate transparency logs, DNS record keeping, timestamping, etc. But we'll start with the basics and work our way up to completeness.