6 Jan
2025
6 Jan
'25
6:06 a.m.
Good day to one and all!
I have been contemplating the idea of utilizing PubSub as a platform to
synchronize browser bookmarks, history and tabs. See article "XMPP For
Browsers" at The XMPP Newsletter of November 2024.
I have received crucial criticism by the Pale Moon developers due to
neglegence of encryption. It is not in my intention to neglegence
encryption, yet I do not intend to add encryption before a working
prototype.
Schimon:
> There is no storage encryption yet. I do not know
whether it is
> necessary
Moonchild:
Unacceptable.
Nobody but the end user should be able to access the stored data.
Encryption is required, and encryption should be set up in such a way
that nobody aside from the end user (not even the server admin) has
access to this data. Storing everything in plaintext in an XMPP
service instance is ridiculous.
That said, the owner of the server must not have any access to the data.
However, I am thinking of encrypting the data, yet I do not how to
implement such system which will be possible to decrypt only by the
owner of the data, and I also do not know how to handle a situation in
which an encryption key was lost.
Links:
https://forum.palemoon.org/viewtopic.php?t=31900
https://portal.mozz.us/gemini/woodpeckersnest.space/~schapps/journal/2024-1…
gemini://woodpeckersnest.space/~schapps/journal/2024-11-28-xmpp-for-browsers.gmi
https://xmpp.org/2024/12/the-xmpp-newsletter-november-2024/
Happy new year!
Schimon