Comment

Comment by egberts1

You cannot say flat-out say that E2E alone must be maintained, you must make it harder for others to reach you, thru something done in-person/screen-only QR-code, Bluetooth'd contact vCard, ..., something that prevents drive-by spammers/perps/malicious actors from randomly attaching to an account.

The key thing is to make distribution of account name harder:

1. Send 256-char hash of your account 2. They tag your hash with a name of their own choice

Disassociative of name to account gets maintained when used with a Signal protocol, which is what Signal app can do.

Again, weak sauce on claiming E2E is alone essential for child's privacy.

parent egberts1 2 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton