Minibone: practical end-to-end encryption for web apps
1–10 of 73 posts
Re: Minibone: practical end-to-end encryption for web apps
#2Seems great, but unfortunately it’s JavaScript. Would’ve loved if it were Python
Re: Minibone: practical end-to-end encryption for web apps
#3Would it be possible to use this with something like webauthn/passkeys instead of passwords?
Re: Minibone: practical end-to-end encryption for web apps
#4Seems great, but unfortunately it’s JavaScript. Would’ve loved if it were Python
It's designed to be able to run in a web app, you can't run python there without including a lot more dependencies.
Re: Minibone: practical end-to-end encryption for web apps
#5Seems great, but unfortunately it’s JavaScript. Would’ve loved if it were Python
Why? E2EE inherently needs to run on the client, and Python isn't very practical for the client side of Web apps.
Re: Minibone: practical end-to-end encryption for web apps
#6Is there anything like this for yjs or similar?
Re: Minibone: practical end-to-end encryption for web apps
#7[deleted]
Re: Minibone: practical end-to-end encryption for web apps
#8This looks... Interesting and also weirdly suspicious. It's "made by Backbone". Backbone appears to be an enterprise security startup (?) but it's unclear because the website tells you almost nothing about the companies history, finances, or who makes up the company.
The committers appear to be "Backbone Authors". The organizations membership is not visible.
With something like this, trust is vital. I need to be able to trust the code now and into the future. For trust, transparency is key. And this project has zero transparency.
For all I know, this could be a state actor trying to lay the foundation for future backdoors.
Re: Minibone: practical end-to-end encryption for web apps
#9Lack of streaming support in the API makes this DOA for many use cases. Fully buffered APIs like these are an unideal abstraction and should be avoided for any large or streamed resources.
Re: Minibone: practical end-to-end encryption for web apps
#10This looks... Interesting and also weirdly suspicious. It's "made by Backbone". Backbone appears to be an enterprise security startup (?) but it's unclear because the website tells you almost nothing about the companies history, finances, or who makes up the company. The committers appear to be "Backbone Authors". The organizations membership is not visible. With something like this, trust is vital. I need to be able…
[deleted]