Darkwire.io
Productivity
encrypted chat
SHOW HN2017
118points
47comments
#365of 2,242 in 2017
Top 17%of 2017 by points
How HN took it
CuriousMostly questions and neutral comments
0 positive, 10 neutral or asking, 1 mixed, 9 critical, out of 20 comments about the project. Thread score -0.41.
Idea: 0 for, 4 againstPrivacy: 0 for, 2 againstDesign: 0 for, 2 againstExecution: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Minimal UI and easy file uploads
From 1 comment
Given that the server distributes the keys, and there is no way for the user to compare/verify known-good keys of other users, it's possible for the server to MITM everything,…
rndgermandude on HN
Objections
Server distributes keys, so it could MITM messages
From 2 comments
This doesn't look especially safe. In addition to the fact that the crypto is delivered by the server, and so every browser/server transaction is an opportunity for the server to…
tptacek on HNGiven that the server distributes the keys, and there is no way for the user to compare/verify known-good keys of other users, it's possible for the server to MITM everything,…
rndgermandude on HN
Uses MtE (MAC then encrypt) rather than EtM
From 2 comments
This doesn't look especially safe. In addition to the fact that the crypto is delivered by the server, and so every browser/server transaction is an opportunity for the server to…
tptacek on HNWhat you describe is MtE (Mac Then Encrypt), which is generally not recommended because you have to decrypt ciphertext before you can check the MAC. This can lead to various…
zaarn on HN
Missing CSP and security headers
From 1 comment
Without looking deeper into the app ... The WebCrypto standard makes a lot of assumptions in terms of underlying security and is dangerous (if not negligent) without proper…
DyslexicAtheist on HN
The name 'dark' has negative connotations
From 2 comments
The name makes it sound dodgy: "dark" reminds me of "dark web" and all the negative connotations. Not great for trustworthiness which is especially important for crypto.
sleavey on HNVery cool! I wonder if the word "dark" makes the name have a negative connotation?
nkkollaw on HN
Requests
Use WebRTC peer-to-peer
From 1 comment
Neat app, but curious why you aren't using WebRTC p2p? I've always thought something like this using WebRTC + a (simple) way to independently check that no data is being sent…
Ros2 on HN
Add password or two-factor option for rooms
From 2 comments
You could give the option to the owner of the room to set a password for anyone wanting to join. And maybe you could use the password to encrypt further communication.
taosx on HNFeature request: Some kind of 2 factor authentication. Such that messages are encrypted are on the view as long as we enter a valid key.
ishansgupta on HN
Questions
Why not WebRTC or contribute to Matrix
From 2 comments
Neat app, but curious why you aren't using WebRTC p2p? I've always thought something like this using WebRTC + a (simple) way to independently check that no data is being sent…
Ros2 on HNKudos for working in this space...but why not just contribute to something like matrix? See: https://matrix.org/docs/guides/faq.html#what-is-matrix
mxuribe on HN
Is Web Crypto API limited to Chrome
From 1 comment
Isn't the web crypto API chrome only at the moment?
rymate1234 on HN
Alternatives named
Signal
From 2 comments
Quick response to some of the comments here: - WebRTC is great in theory, terrible in practice (doesn't work very well), and still needs a bootstrapping server. So it is better…
marknadal on HNI understand the benefits from instant web chat, but I think it's not too difficult to access the signal protocol through Whatsapp or Signal's desktop app.
free2rhyme214 on HN
WhatsApp
From 2 comments
> - Signal and Whatsapp, as others have pointed out, are far from being comfortable as being private (they already know too much, phone number, etc.), and don't have the…
gurgus on HNI understand the benefits from instant web chat, but I think it's not too difficult to access the signal protocol through Whatsapp or Signal's desktop app.
free2rhyme214 on HN
Matrix (Riot)
From 2 comments
Kudos for working in this space...but why not just contribute to something like matrix? See: https://matrix.org/docs/guides/faq.html#what-is-matrix
mxuribe on HNThose implementations both require phone numbers and registration through a mobile app (hence lack anonymity) and are useless for many use cases. I think Matrix (Riot) would be a…
Veratyr on HN
Volafile
From 1 comment
Volafile seems like a better alternative to this.
TehJIDF on HN