In-depth technical inquiry about application-level encryption. How crypto helps to narrow down significant risks to controlled attack surfaces, enables managing the risk efficiently and elegantly, how tools and algorithms sit in a broader context of managing infrastructure-wide risks associated with handling sensitive data.
Before we get deep into protocols vulnerabilities: things you should remember designing your app flow from a security point of view.
This is a story of going through typical security challenges: how to build products that reliably deliver security guarantees, avoid typical pitfalls, and are usable in a predictable fashion by real users.
With intensifying threat access, snooping governments and insecure-internet-of-everything, the importance of zero-knowledge application architectures and end-to-end trust, for things more complicated than simple messaging, becomes more and more obvious for the app developers.
This is a story from a designer @anatinge and a developer @vixentael who worked together and built a product for people who really need it.
I’m working at Cossack Labs on data protection & encryption tools. Some are free, some are proprietay, but all of them are easy-to-use & hard-to-misuse, and do protect data.
Visit site