21–30 of 129 posts
For personal use, I’ve had good luck storing things in files. Then when I need those those things, I read the files.
What does it do better than Skate? Or what additional things does it do, url and qr codes?
Especially self-hosting kvass is even simpler than skate, and I had issues linking/syncing skate in the past.
It would probably be a nice weekend project to port the url/qr features to skate.
Quoted post unavailable.
Nice project! I'm wondering why you choose to implement your own cryptography routines instead of using something standard like TLS. Apparently your `DecryptData` and `Encrypt` methods are vulnerable to replay attacks due to a lack of (EC)DH-style key exchange.
Thanks for the critique! I wanted to use symmetric crypto as its trivial to use without domains and certificates. The possibility of replays is a non-issue, as the key-value store is implemented as a CRDT and therefore all operations are idempotent. On the other hand, I didn't anticipate replay attacks in the design and thanks to your comment, I'll keep them in mind should I ever find myself in a scenario where they…
Cool project! Congrats on launching ! What is the benefit compared to reddit or CF workers KV?
This is by no means meant to replace the backend of your app. It's more of an alternative to usb-sticks and google drive.
For personal use, I’ve had good luck storing things in files. Then when I need those those things, I read the files.
Wait, this is just a toy project.
Earlier quoted context omitted.
Thanks for the critique! I wanted to use symmetric crypto as its trivial to use without domains and certificates. The possibility of replays is a non-issue, as the key-value store is implemented as a CRDT and therefore all operations are idempotent. On the other hand, I didn't anticipate replay attacks in the design and thanks to your comment, I'll keep them in mind should I ever find myself in a scenario where they…
TLS is available in pre-shared key (PSK) mode. Looks like there is ongoing work to add TLS-PSK to Go's standard library: https://github.com/golang/go/issues/6379#issuecomment-117006...
What is the benefit compared to the private use of Redis? Redis is under BSD licence and continues to be very actively maintained and used.