Content
@
0 reply
0 recast
0 reaction
Varun Srinivasan
@v
For people who want DCs on web, do you prefer: 1. No Encryption - would ship this month, encryption added later, other fc clients could integrate next year 2. Encryption - takes another 6-12 months b/c blocked on Google Chrome passkeys support
79 replies
12 recasts
102 reactions
Dan Finlay 🦊
@danfinlay
Is there a path like: 3- Ship e2ee quickly for any browser with Passkeys, which includes people running password managers like 1Password? Or: Just use some other encryption algorithm, instead of passkeys? Example: Derive an encryption key from an account signature.
1 reply
0 recast
0 reaction
Varun Srinivasan
@v
Encryption key is derived from ECDSA key using ECDH and used to double ratchet encryipt. Passkey used to store ECDSA keypair w/o extension in browser. But: 1. Passkey ECDSA storage broken on Apple for 3rd party apps like 1Pass. 2. Passkey ECDSA storage not supported on Google.
1 reply
0 recast
3 reactions
