129
submitted 1 year ago by Kidplayer_666@lemm.ee to c/privacy@lemmy.ml
you are viewing a single comment's thread
view the rest of the comments
[-] kalleboo@lemmy.world 14 points 1 year ago

As for storing the private key you could encrypt it with (a derivative of) the user’s password

And now every time a user forgets their password and does password recovery, they lose all their DMs.

E2EE chat is a difficult problem.

[-] DivergentHarmonics@sopuli.xyz 2 points 1 year ago

That's a feature not a bug!
Actually, users should not be required to trust the browser storage or in-app key generation, but be enabled to enter their own pgp key.

[-] amju_wolf@pawb.social 1 points 1 year ago* (last edited 1 year ago)

I mean you could just store it encrypted in the database for the basics, and for advanced users allow them to back it up.

There are tons of ways to improve it, but there is definitely way more you can do without much inconvenience to the users. I doubt losing old DMs is a huge issue when you forget your password...

this post was submitted on 20 Aug 2023
129 points (97.8% liked)

Privacy

32103 readers
551 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS