Private/Encrypted Pastes #1

Closed
opened 2024-02-10 21:09:22 +00:00 by hkau · 1 comment
Owner

The last big feature remaining that's keeping Bundlrs from having all needed features of Bundles is private pastes. Bundles used AES encryption to encrypt all private pastes and uses a ViewPassword to decrypt them. The only issue with this is the encryption information is ALSO stored on the server, meaning the "encryption" is basically useless.

It would make more sense to not spend resources actually encrypting pastes on Bundlrs, but to instead just use a ViewPassword field in PasteMetadata that is required to view a paste IF it is present in the metadata (Option<String>).

This implementation would also mean that making a paste private could be undone through the paste metadata settings.

The last big feature remaining that's keeping Bundlrs from having all needed features of Bundles is **private pastes**. Bundles used AES encryption to encrypt all private pastes and uses a `ViewPassword` to decrypt them. The only issue with this is the encryption information is ALSO stored on the server, meaning the "encryption" is basically useless. It would make more sense to not spend resources actually *encrypting* pastes on Bundlrs, but to instead just use a `ViewPassword` field in `PasteMetadata` that is required to view a paste IF it is present in the metadata (`Option<String>`). This implementation would *also* mean that making a paste private could be undone through the paste metadata settings.
hkau self-assigned this 2024-02-10 21:09:22 +00:00
hkau added this to the Main Bundles Features milestone 2024-02-10 21:09:50 +00:00
hkau added the
enhancement
label 2024-02-10 21:11:16 +00:00
Author
Owner

Added in 8417e72e7f

Added in 8417e72e7f
hkau closed this issue 2024-02-24 03:48:12 +00:00
Sign in to join this conversation.
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: stellular/bundlrs#1
No description provided.