5 ms·

"…add one NSA-resistant feature to your app". What features would that be?

• simias 13y ago
  Well, if your app uses the network use SSL for instance. Avoid cleartext wherever possible.
  • npizzolato 13y ago
    I believe his point was that the website makes no mention of SSL or any other examples of NSA-resistant features. "Add one NSA-resistant feature to your app" without any further explanation is not exactly informative or helpful.
  • mindslight 13y ago
    The problem is that SSL (transport security) is the only "NSA-resistant" feature that can ever be added to a website, or incrementally added to an app. And it only works until you (or your hosting provider) gets big enough that NSA demands (or takes) direct access to you, the man-in-the-middle. Unless your application is open source, administered by a user-controlled package manager, based on end-to-end encryption with user-managed keys, and takes steps to obscure communication-graph metadata, touting the addition of "NSA-resistant" security features is selling snake oil.
  • deleted 13y ago
    [deleted]