I’m trying to create a web app that involves sharing of user-generated content, but one of the goals is that the service host operator should be blind to the content. Only authorized users should be able to see the content shared with them. This implies the content must be encrypted at rest, and users must hold custody of their private signing key.

I figure the situation requires an open source browser extension to hold onto a user’s keys and decrypt content for them. The web app would still be able to browse all of the site’s metadata, but any plaintext content must be siloed in the extension. The reason for using an extension is that the source code would be open source and independently verifiable, while building the same functionality into the web app would require trusting the host to serve the code you expect.

Do you think that’s a reasonable tradeoff or is this asking too much from users?

The other option would be just requiring users to download an open source app for content viewing.

EDIT: Perhaps an important followup: are you OK placing trust in the host to never access your confidential data if it means you don’t have to install additional client software or worry about verifying that client software’s authenticity?

  • lawks@aussie.zone
    21·
    2 days ago

    You can call someone “full of it” and put as many cute little emojis as you like, but if you can’t articulate a coherent argument about what you think they’ve said is factually incorrect, you may not be the brilliant bullshit detector you think you are. And repeating the insult with nothing of substance to back up the assertion just reduces your argument to ad hominem.

    • HeHoXa@lemmy.zip
      12·
      2 days ago

      💩 i get it, it’s hard being so wrong and you really need a W from SOME angle

          • lawks@aussie.zone
            11·
            2 days ago

            So you don’t understand that, either? When your only argument is insult, that’s ad hominem. You never addressed any of the valid criticism of your fear mongering, other than to repeat the same misinformation.

            You’re calling me wrong because you think I’m “full of it” without being able point to anything that’s factually incorrect about what I’ve said.

            • HeHoXa@lemmy.zip
              11·
              2 days ago

              You remember earlier when you said, “Still going,” like it was absurd?

              💩

              It’s alright, a career in tech isn’t for everyone. Imm sure you have plenty of great skills

              • lawks@aussie.zone
                11·
                2 days ago

                I’ll be sure to tell my employer that my services are no longer need because some jerk on Lemmy thinks that File.readAsArrayBuffer() and SubtleCrypto.encrypt() packaged up in an extension that needs no special permissions, no companion app, and is limited to activating on a single named website, is like totally gonna scan my whole hard drive, man, what a drag.

                You really are a dunce.