onereplyac2

5 ms·

1. 1.▲
   by onereplyac2 3y ago

   What amilich said is correct. However, what he is leaving out is that both have access to unencrypted email at send and recieve time, so you are taking Skiffs word that they dont log emails - since you have to trust the server this is not e
2. 2.▲
   by onereplyac2 3y ago

   From your source, chacha20 is used, which is literally not supported by web crypto apis. Again, this makes 0 difference as higher level implementation makes or breaks your crypto.
3. 3.▲
   by onereplyac2 3y ago

   This is encryption at rest, with the user holding the keys, and not end to end to end encryption, since the server recieves emails coming outaide of akiff in unencrypted form to begin with. As a simple demonstration, even if client side cod
4. 4.▲
   by onereplyac2 3y ago

   Again, only between users with skiff emails, which is a negligible portion of all emails. This needs to be made clear as it is very misleading to the average user who probably thinks all emails are end to end encrypted.
5. 5.▲
   by onereplyac2 3y ago

   You mean you currently do this but plan not to in the future
6. 6.▲
   by onereplyac2 3y ago

   Huh? It is very concerning to hear this from a founder. It is the same exact level of security as it is executing the same code, just at a different level. Really does not matter what crypto lib you are using if at the end of the day the su