3 ms·
Sorry to play the paranoiac, but that is the demographic you're trying to appeal to! There seems to be a key element of trust required for using this site. Ho
by fjorder 14y ago
Sorry to play the paranoiac, but that is the demographic you're trying to appeal to!
There seems to be a key element of trust required for using this site. How do we know the code cycret.com runs is the same as what's on Github? i.e. How do we know cycret isn't actually running different code that serves as a man-in-the-middle by creating RSA encrypted channels to both the sender and receiver, but archiving plain-text of all their communications as they pass through cycret.com? Programs like GPG can be compiled from source on your own computer so that, if you understand the code, you can trust it. This doesn't appear to have that advantage!
I don't know that much about web stuff, so if there is an easy and trustable way to see what code cycret is actually running without taking your word for it, I'd be very curious to know how!
- dirktheman 14y agoYes, trust is absolutely an issue here. I put the code on GitHub so people can run it themselves. On the other hand, people also trust websites like gmail, their bank accounts and government stuff with their private data, without knowing anything about the encryption/decryption process behind it...
- fjorder 14y agoNormal people are willing to trade a bit of security away for convenience. Your system might be easier to learn, but using it doesn't appear much more convenient than using GPG, so it is necessarily going to have to live up to the standards of a more paranoid crowd.