4 ms·

I came across cryptpad as cryptpad.cz but couldn't figure out who was behind it at the time. At least with this link you can get to at least one seemingly legit

I came across cryptpad as cryptpad.cz but couldn't figure out who was behind it at the time. At least with this link you can get to at least one seemingly legit dev, which makes me take it more seriously. Is cryptpad.cz a fork of this or vice versa?

Tomte 1y ago
CryptPad is developed by XWiki as a side project.
- sillyfluke 1y ago
  Do you know of any publicized auditing done on the E2E aspect of it? Curious about that since it's part of the name and a prominent publicized feature.
  - ldubost 1y ago
    I'm from the CryptPad team There is our white paper on the security features of CryptPad: https://blog.cryptpad.org/2023/02/02/Whitepaper/ https://blog.cryptpad.org/2023/02/02/Whitepaper/ In terms of audits, we don't have the funding for formal audits but a couple years ago the European Community paid a bug bounty https://commission.europa.eu/news/european-commissions-open-source-programme-office-starts-bug-bounties-2022-01-19_en https://commission.europa.eu/news/european-commissions-open-... We received some interesting reports but not as much on the cryptography than on web related issues Ludovic
    - sillyfluke 1y ago
      Thanks. Isn't vouching for other online instances a bit risky? Wouldn't you have to constantly verify the source is unmodified in an automated fashion for those instances you don't control?
      - ldubost 1y ago
        Interesting point. We should add some warnings about this. Ludovic, from the CryptPad team.
- jraph 1y ago
  I feel like side needs to be precised a bit. Although it admittedly doesn't generate nearly as much revenue as XWiki, several people are paid full time to work on it, and it receives public grants. It is an important project for XWiki SAS. (I work for XWiki, on XWiki though)
jraph 1y ago
cryptpad.cz seems to be one of the many instances of CryptPad. I don't know who is behind. CryptPad.org is the official website of the project (and cryptpad.fr an instance maintained by the original devs).

Tomte 1y ago

CryptPad is developed by XWiki as a side project.

sillyfluke 1y ago
Do you know of any publicized auditing done on the E2E aspect of it? Curious about that since it's part of the name and a prominent publicized feature.
- ldubost 1y ago
  I'm from the CryptPad team There is our white paper on the security features of CryptPad: https://blog.cryptpad.org/2023/02/02/Whitepaper/ https://blog.cryptpad.org/2023/02/02/Whitepaper/ In terms of audits, we don't have the funding for formal audits but a couple years ago the European Community paid a bug bounty https://commission.europa.eu/news/european-commissions-open-source-programme-office-starts-bug-bounties-2022-01-19_en https://commission.europa.eu/news/european-commissions-open-... We received some interesting reports but not as much on the cryptography than on web related issues Ludovic
  - sillyfluke 1y ago
    Thanks. Isn't vouching for other online instances a bit risky? Wouldn't you have to constantly verify the source is unmodified in an automated fashion for those instances you don't control?
    - ldubost 1y ago
      Interesting point. We should add some warnings about this. Ludovic, from the CryptPad team.
jraph 1y ago
I feel like side needs to be precised a bit. Although it admittedly doesn't generate nearly as much revenue as XWiki, several people are paid full time to work on it, and it receives public grants. It is an important project for XWiki SAS. (I work for XWiki, on XWiki though)

jraph 1y ago

cryptpad.cz seems to be one of the many instances of CryptPad. I don't know who is behind. CryptPad.org is the official website of the project (and cryptpad.fr an instance maintained by the original devs).