Why I created scrt.link

Post by weird-eye-issue » Fri, Jul 02, 2021, 1:40 PM UTC

jgalt212 wrote: post #28

weird-eye-issue wrote: post #22

Earlier quoted context omitted.

No, it expires after they view it.

Yes, this is a nice solution, but email security services do click on links before delivering to the client's email inbox. As such, you may need to set the link expiry click number to greater than 1. And then you lose the security due to being ephemeral. Of course, you can log the IP addresses of the clickers, but still you have the leak.

Post by stophecom » Fri, Jul 02, 2021, 3:23 PM UTC

alphachloride wrote: post #32

This website is flagged as malware/inappropriate at my institution.

Post by cunthorpe » Fri, Jul 02, 2021, 5:06 PM UTC

mattowen_uk wrote: post #8

cunthorpe wrote: post #4

I’m always wary of consumer services that specifically target secrecy and encryption. How many of those “lockbox” photo apps are just syphons into the developer’s server? “We’ll encrypt the file, trust us.” This message can only come from an already-trusted party. Mozilla had an identical service to this except it was for files (Firefox Send) and that one I could trust.

If I wrote something like this, I'd try to be as transparent as I could be as to who I was, and how you could contact me. Hopefully that would create some small level of trust. -- As an aside, I know you are trying to be funny, but your username is tad offensive.

Post by jgalt212 » Sat, Jul 03, 2021, 5:17 PM UTC

weird-eye-issue wrote: post #31

jgalt212 wrote: post #28

Earlier quoted context omitted.

Yes, this is a nice solution, but email security services do click on links before delivering to the client's email inbox. As such, you may need to set the link expiry click number to greater than 1. And then you lose the security due to being ephemeral. Of course, you can log the IP addresses of the clickers, but still you have the leak.

In practice this has not been a problem. It's like saying you can't put unsubscribe links in emails because a bot will click on it... You just simply design the software so that doesn't happen. Like I said, I've used a similar service that only allows you to view the secret once and I've used it dozens of times with no problems.

Post by weird-eye-issue » Sun, Jul 04, 2021, 2:38 PM UTC

jgalt212 wrote: post #37

weird-eye-issue wrote: post #31

Earlier quoted context omitted.

In practice this has not been a problem. It's like saying you can't put unsubscribe links in emails because a bot will click on it... You just simply design the software so that doesn't happen. Like I said, I've used a similar service that only allows you to view the secret once and I've used it dozens of times with no problems.

> you just simply design the software so that doesn't happen. How do you go about doing that? disregard security service clicks based on IP address blacklists, user agent sniffing, etc?