105
submitted 18 hours ago* (last edited 18 hours ago) by dl007@lemmy.ml to c/opensource@lemmy.ml
you are viewing a single comment's thread
view the rest of the comments
[-] peregus@lemmy.world 1 points 6 hours ago

How it works: I don’t know about this service in particular, but usually the shared contains the encryption key so like this: example.com/files/file_id/encryption_key or something similar

But if the key is in the URL, that's provided by the server, where's the utility of the encryption since the server knows it and so does everyone that has the URL?

[-] flux@lemmy.ml 1 points 6 hours ago

So the trick is to use the #fragment part of the URL, that is not sent to the server.

Of course the JS one downloads from the server could easily upload it to it, so you still need to trust the JS.

[-] peregus@lemmy.world 1 points 6 hours ago

But the JS code could be checked on the webpage, correct? If so, the page could be trysted (if vetted).

this post was submitted on 05 Nov 2024
105 points (99.1% liked)

Open Source

31028 readers
759 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago
MODERATORS