• Helix 🧬@feddit.de
    link
    fedilink
    arrow-up
    4
    ·
    3 years ago

    That blog post is not about Element and doesn’t include any of the ways Element stores data and sets up encryption. Basically they’re just saying ‘there’s no sane defaults and websites want to spy on you’, which I totally agree to, but which still misses the point. It is doable, it’s just not done well. To just send everything in plaintext is definitely not the solution here.

      • Helix 🧬@feddit.de
        link
        fedilink
        arrow-up
        1
        ·
        3 years ago

        it’s about the fact that you’re doing crypto to protect yourself from the server, using code that the server just sent you

        Ah, yes, makes sense. Solutions to this may be to use client applications, local storage in browsers or checksumming.