Live data from Hacker News

Show HN: I built a website to share files and messages without any server

neighbor-share.vercel.app

111–112 of 112 posts

Re: Show HN: I built a website to share files and messages without any server

#111
post #105
post #59

Earlier quoted context omitted.

What makes it different? (I'd personally like to know the details of how the cryptography works)

In terms of differentiation, I have not explored much solutions available out there so can not comment much on that. About the encryption part, WebRTC communications over browsers are encrypted using Datagram Transport Layer Security (DTLS). All WebRTC sessions are encrypted. You can found more in depth details in this article: https://telnyx.com/resources/webrtc-encryption-and-security And sorry for not replying I w…

I don't think DTLS alone would be considered end-to-end encryption. For E2E the application layer has to be responsible for encryption and decryption.

Are you employing E2E on the client side? Encryption during transit shouldn't be claimed as E2E. Please correct me if I'm wrong.

Re: Show HN: I built a website to share files and messages without any server

#112
post #87

Earlier quoted context omitted.

Cloud encryption is just HTTPs + encryption at rest (only claimed, not verified). They hold the keys, irrespective of how many proprietary protocols they wrap over the message. A great product tho! I used saved messages extensively!

> Cloud encryption is just HTTPs + encryption at rest Not just plain-old HTTPs. MTProto 2.0 is a whole encryption algorithm for Cloud chats: https://core.telegram.org/mtproto/AJiEAwIYFoAsBGJBjZwYoQIwFM...

In the end, they hold the keys irrespective of how many algorithms they wrap on top.

I do not feel it is any different from Google Chat, Twitter DMs, etc. They do have a lot of censorship resistant and anti-MITM attack features in between, but they hold the keys by default

I use it for convenience and amazing features, not for security!

Post reply on HN