4 ms·
Before I would even consider something like this: * Where's your privacy policy? * What/how are you handling the different customer protection laws? What juri
by devilkin 1y ago
Before I would even consider something like this:
* Where's your privacy policy?
* What/how are you handling the different customer protection laws? What juristictions are you working in? Where's the data hosted?
* Where's the design description?
* What encryption are you actually using? If you rolled your own, then well.. good luck.
* How could you ensure end-to-end encryption over multiple protocols, without either completely reverse engineering said protocols? If your answer here would be that you're using a central server where messages get passed between services (and thus decrypted), it isn't end-to-end.
The site is also very flaky. Sometimes it loads, sometimes it doesn't.
There are so many questions, and zero answers.
- giancarlostoro 1y ago> The site is also very flaky. Sometimes it loads, sometimes it doesn't. That's probably the HN front page effect to be fair.
- busymom0 1y agoSomething is weird about the javascript or CSS on the site. When I first scroll down, many things didn't animate and didn't show. When I scroll up and then scroll back down again, then they animated in.
- DmitryDolgopolo 1y agoWhat browser are you using?
- busymom0 1y agoI tested on macOS Safari.
- DmitryDolgopolo 1y ago- Yep. You can read our privacy policy here: https://dimadolgopolovn.notion.site/Amber-Privacy-Policy-2568a89c5295807fb21cf8a4e0ea882a https://dimadolgopolovn.notion.site/Amber-Privacy-Policy-256... - Check out the demo in the original post. - We use native API or reverse-engineer a solution depending on the platform. This approach maintains the security standard as high as the original app. Everything is done locally on your computer.
- f4ye 1y agocould you please link to stuff like the demo and the privacy policy on the site? i only found this thread by chance and would have missed it otherwise ^^;
- devilkin 1y agoAt that point calling it end-to-end encrypted is not true.
- warkdarrior 1y agoWhat definition of "end-to-end encrypted" do you refer to, if on-device processing does not qualify? Isn't your device one of the endpoints in E2EE?
- magackame 1y agoIn context of instant messaging E2EE usually means that service providers servers don't ever see the plaintext with messages stored on device. Just the transport encryption is already an expectation for all networking. - Signal: E2EE - Telegram: by default, nah - Discord, nah
- j4hdufd8 1y agoCan you elaborate where you think it stops being encrypted?