this post was submitted on 15 Aug 2026
41 points (97.7% liked)

Ask Lemmy

40948 readers
2907 users here now

A Fediverse community for open-ended, thought provoking questions


Rules: (interactive)


1) Be nice and; have funDoxxing, trolling, sealioning, racism, toxicity and dog-whistling are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them


2) All posts must end with a '?'This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?


3) No spamPlease do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.


4) NSFW is okay, within reasonJust remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either !asklemmyafterdark@lemmy.world or !asklemmynsfw@lemmynsfw.com. NSFW comments should be restricted to posts tagged [NSFW].


5) This is not a support community.
It is not a place for 'how do I?', type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.


6) No US Politics.
Please don't post about current US Politics. If you need to do this, try !politicaldiscussion@lemmy.world or !uspolitics@lemmy.world


7) No Hit-and-Run questions.
Please don't delete your post for no apparent reason. If you plan on deleting a question later, say so in the post, or if you feel that you have a good reason to remove it, message a mod beforehand. It's not fair to the ones who took their time to answer, and it's not in the spirit of the community.


8) No Bots.
Posts or comments from bots, LLM's, AIs, Neural Networks, Transformers, or Marvin the Paranoid Android are not welcome in AskLemmy. Real humans only please.


Reminder: The terms of service apply here too.

Partnered Communities:

Tech Support

No Stupid Questions

You Should Know

Reddit

Jokes

Ask Ouija


Logo design credit goes to: tubbadu


founded 3 years ago
MODERATORS
 

I'm trying to create a web app that involves sharing of user-generated content, but one of the goals is that the service host operator should be blind to the content. Only authorized users should be able to see the content shared with them. This implies the content must be encrypted at rest, and users must hold custody of their private signing key.

I figure the situation requires an open source browser extension to hold onto a user's keys and decrypt content for them. The web app would still be able to browse all of the site's metadata, but any plaintext content must be siloed in the extension. The reason for using an extension is that the source code would be open source and independently verifiable, while building the same functionality into the web app would require trusting the host to serve the code you expect.

Do you think that's a reasonable tradeoff or is this asking too much from users?

The other option would be just requiring users to download an open source app for content viewing.

EDIT: Perhaps an important followup: are you OK placing trust in the host to never access your confidential data if it means you don't have to install additional client software or worry about verifying that client software's authenticity?

you are viewing a single comment's thread
view the rest of the comments
[โ€“] HeHoXa@lemmy.zip 0 points 3 hours ago (1 children)

๐Ÿ’ฉ semantic distinctions, extensions can run whatever when you register the logic in advance, as suggested in my first comment

[โ€“] lawks@aussie.zone 0 points 2 hours ago (1 children)

If you think installing a downloaded program alongside your browser is a "๐Ÿ’ฉ semantic distinction" from a bit of script running inside your browsers sandboxing, then it's clear you either don't know what you're talking about, or you'd rather continue to to spread FUD than concede on basic facts.

[โ€“] HeHoXa@lemmy.zip 2 points 2 hours ago (1 children)

It is he thing I suggested from the start.

I already get you're full of it. You don't have to jeep selling me

[โ€“] lawks@aussie.zone 0 points 2 hours ago* (last edited 2 hours ago) (2 children)

> Says they wrote an extension 3 years ago but doesn't seem to know about decade-old isolation.
> Tries to tell everyone that extensions like OP's can run system commands, despite their use case not having any need to do so.
> Accuses others of being full of it.

Jog on, mate.

[โ€“] HeHoXa@lemmy.zip 1 points 1 hour ago

All nonsense aside I recognize you were trying to be helpful in your own way.

I don't much care for that way but bear you no genuine ill will and wish you the best.

๐Ÿ’ฉ

[โ€“] HeHoXa@lemmy.zip 1 points 2 hours ago* (last edited 2 hours ago)

๐Ÿ’ฉ

For posterity, my original edit was in before his first comment.

So full of it