Password-Protect My File
Security and privacy
file encryption
SHOW HN2014
How HN took it
3 positive, 5 neutral or asking, 1 mixed, 4 critical, out of 13 comments about the project. Thread score -0.11.
Privacy: 2 for, 4 againstIdea: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Simple enough for non-technical users
From 2 comments
Does it claim to be better? The main advantage I can see is simplicity, even non-technical users should be able to figure it out.
dav- on HNIt's the same as using openssl aes-256-cbc -in plaintext -out ciphertext That's as easy and convenient as it can get for me. But it might be helpful if I have to send an…
chrisxcross on HN
Self-contained HTML file works offline
From 2 comments
It's all in one html file, so it will work disconnected from the internet. Download or save the page, turn off your internet, open it in a browser, and encrypt with peace of mind…
sobel on HNI really like this. Especially the self-contained html file you send around afterwards. You should recommend people to download the html and then save it instead of using the…
herge on HN
Objections
Sensitive files passed through in-browser JavaScript could be exposed or the hosted code could change
From 2 comments
If a user doesn't trust Dropbox, why would they trust passwordprotectmyfile.com? I know it claims the file doesn't leave your computer, and that might be true right now, but in…
michaelt on HNAs soon as my file is readable by javascript it could be sent anywhere by your code. I'm not saying you do, but it could. Therefore this adds an unnecessary risk. I would have to…
chrisfarms on HN
Trust in the hosted site is needed; self-hosting is not highlighted
From 2 comments
Should really highlight the fact that it could be self-hosted [0]. Typing a password and uploading a sensitive file is never a good idea. [0] https://github.com/louissobel/ppmf
rayshan on HNAt first sight it seems the encryption is done by client-side javascript, so you don't gain much by hosting it yourself.
untitaker_ on HN
Requests
Recommend downloading the HTML file instead of using the page
From 1 comment
I really like this. Especially the self-contained html file you send around afterwards. You should recommend people to download the html and then save it instead of using the…
herge on HN
Remove Google Analytics from the self-contained version
From 1 comment
I really like this. Especially the self-contained html file you send around afterwards. You should recommend people to download the html and then save it instead of using the…
herge on HN
Questions
Does it work in any browser?
From 1 comment
Any browser?
selter01 on HN
How is it better than symmetric GnuPG encryption?
From 1 comment
How is this better than symmetric encryption with GnuPG?
55873445216111 on HN
Alternatives named
openssl aes-256-cbc
From 1 comment
It's the same as using openssl aes-256-cbc -in plaintext -out ciphertext That's as easy and convenient as it can get for me. But it might be helpful if I have to send an…
chrisxcross on HN
GnuPG symmetric encryption
From 1 comment
How is this better than symmetric encryption with GnuPG?
55873445216111 on HN
Self-extracting WinZip archives
From 1 comment
I'm reminded of those self-decrypting .exe archives that WinZip used to produce back in the day...
cbhl on HN