▲ 126 ▼ How do DM's work in Lemmy? How safe are they? (lemm.ee) submitted 2 years ago by Kidplayer_666@lemm.ee to c/privacy@lemmy.ml 32 comments fedilink hide all child comments
[–] kalleboo@lemmy.world 14 points 2 years ago (2 children) As for storing the private key you could encrypt it with (a derivative of) the user’s password And now every time a user forgets their password and does password recovery, they lose all their DMs. E2EE chat is a difficult problem. permalink fedilink source parent hideshow 4 child comments replies: [–] DivergentHarmonics@sopuli.xyz 2 points 2 years ago That's a feature not a bug! Actually, users should not be required to trust the browser storage or in-app key generation, but be enabled to enter their own pgp key. permalink fedilink source parent [–] amju_wolf@pawb.social 1 point 2 years ago* I mean you could just store it encrypted in the database for the basics, and for advanced users allow them to back it up. There are tons of ways to improve it, but there is definitely way more you can do without much inconvenience to the users. I doubt losing old DMs is a huge issue when you forget your password... permalink fedilink source parent
[–] DivergentHarmonics@sopuli.xyz 2 points 2 years ago That's a feature not a bug! Actually, users should not be required to trust the browser storage or in-app key generation, but be enabled to enter their own pgp key. permalink fedilink source parent
[–] amju_wolf@pawb.social 1 point 2 years ago* I mean you could just store it encrypted in the database for the basics, and for advanced users allow them to back it up. There are tons of ways to improve it, but there is definitely way more you can do without much inconvenience to the users. I doubt losing old DMs is a huge issue when you forget your password... permalink fedilink source parent