• LWD@lemm.ee
    link
    fedilink
    arrow-up
    7
    ·
    2 years ago

    I looked into it a while ago, and I remember being unimpressed with the so-called end-to-end encryption. If it is as I recall, the encryption happens on his servers, which makes it not E2EE at all, but rather an amateurishly implemented form of encryption at rest.

    His code boasts a lot of jQuery libraries, for some reason. One jQuery library is a red flag. His project boasts six, and one of them is from 2013.

    Here is the encryption and decryption functionality, which to my dizzy eyes, don’t look like they contain forward secrecy… But I haven’t downloaded the project to look particularly closely.