How are encryption keys established between the clients?
Airborn: Create and edit files online, securely
11–20 of 75 posts
Re: Airborn: Create and edit files online, securely
#12I like how they don't flaunt crypto terms all over the place. Calling encrypted content "gibberish" is fun.
And I think it's a genius use-case for Service Workers. From their security page[0]: "we're using a relatively new web technology (Service Workers) to install some code which can't be changed without setting off a warning to you. That code then keeps taps[sic] on all other code, and checks that it matches the publicly available version on GitHub."
Combine this with HSTS, and you can be certain the code running hasn't been modified by a third-party.
Re: Airborn: Create and edit files online, securely
#13Better headline: "Airborn: Create and edit files online, securely." HN has too many submissions with single-word headlines that tell you absolutely nothing about what you're clicking on.
Thanks. Done.
Re: Airborn: Create and edit files online, securely
#14few questions:
- here [0] "All documents are encrypted before they leave your computer" how then one can collaborate as in gdocs (from the pic it seems like that)
- what key do you use for encrypting the docs? is it the user password? if so it can't be recoverd (as dashlane for example [1]) is this the approach?
PS: the login seems broken https://www.airborn.io/app
[0]https://www.airborn.io/docs/security [1]https://support.dashlane.com/hc/en-us/articles/115003111325
Re: Airborn: Create and edit files online, securely
#15> Even if we get hacked, they can't read your documents.
Unless e.g. they make the system serve up malicious javascript.
Re: Airborn: Create and edit files online, securely
#16few questions: - here [0] "All documents are encrypted before they leave your computer" how then one can collaborate as in gdocs (from the pic it seems like that) - what key do you use for encrypting the docs? is it the user password? if so it can't be recoverd (as dashlane for example [1]) is this the approach? PS: the login seems broken https://www.airborn.io/app [0] https://www.airborn.io/docs/security [1] https:/…
- When you create a collaboration link, it contains an encryption key. (You can additionally also set a password.) All messages sent to the server by collaborators are then encrypted with those. The collaboration algorithm is currently quite simple, and paragraphs are locked when editing them. In the future we'd like to use a P2P algorithm, e.g. using Y.js. [1]
- When you sign up, the page downloads a file on your PC which contains your username, and your password encrypted with a "password recovery key". When you lose your password, we send you your password recovery key and you can decrypt your password with it.
Login being broken is weird, do you see any errors?
Re: Airborn: Create and edit files online, securely
#17> Even if we get hacked, they can't read your documents. Unless e.g. they make the system serve up malicious javascript.
Please see https://www.airborn.io/docs/security for a description of how we solved that :)
Re: Airborn: Create and edit files online, securely
#18Is Google Docs not secure enough already? I haven't heard of any hacks on that platform. What additional features are offered here besides security?
Re: Airborn: Create and edit files online, securely
#19Great way to comply with GDPR! Also presumably reduces your data management overhead slightly, although it seems you're still storing data on your own systems[1]. This reminds me of SpiderOak's "No Knowledge" claim[2]. [1] https://www.airborn.io/docs/security [2] https://spideroak.com/no-knowledge/
Thanks! No, all data is stored either on Amazon S3 or on our servers. The way we make sure that nobody can read your data is using encryption.
Re: Airborn: Create and edit files online, securely
#20Interesting strategy to list updating the software as a premium feature. Will you make old versions of the software permanently available to customers to install on new devices? Will you support your v1 API forever?
Non-business accounts update to the latest version automatically. If you login to an old non-updated account using a new device, you get the old version. We might eventually notify old accounts that they have to update, but we haven't needed to do so yet. If you pay close attention to the requests by https://www.airborn.io/demo, you can see "v2" :)