3 ms·
The README throws up huge red flags to anyone who has studied crypto. For example, saying you use AES-256 without explaining what cipher mode really doesn't sa
by ef4 13y ago
The README throws up huge red flags to anyone who has studied crypto.
For example, saying you use AES-256 without explaining what cipher mode really doesn't say anything at all about the security of your system.
And even if your crypto system is awesome, it doesn't matter at all because it's all running on the server, where the NSA (or local equivalent) can simply force you to turn it off at any time.
If you really care about bringing strong privacy to users, you need to give them something they can run locally, so they don't need to trust your server.
- bennyg 13y agoI fixed the README to say it was using CBC for the cipher mode, thanks for that input. (though this will be changing to NaCL's implementation of XSalsa20 very, very soon) I made it open source so people can also fork and run on a local machine, that only they hit - but I plan on launching an iOS app very soon for it as well, so you can do something on one computer, and then use another to make changes or see things on the go. This is the only reason I made it in the cloud.