undefined | Better HN

0 pointsevbogue1y ago0 comments

Well, exactly. My point is that in a constrained use-case NaCl would be sufficient.

If you want to rotate keys, then simply delete your private key and since we trust Bluesky so much we can use the PDS to share new pubkeys once we rotate. In fact, this would work for signing keys too! Then the PDS wouldn't be able to write messages for you if it wanted to.

For group messaging you simply encrypt the message to each recipient.

If they want to upgrade to a Axolotl from this, great! But starting with plain text is not private messaging, it is group messaging with your PDS admins and whoever they want to share that data with.

0 comments

some_furry1y ago

I literally wrote an X3DH implementation atop libsodium once

https://github.com/soatok/rawr-x3dh

I'm telling you, TweetNaCl is not enough to build a secure messenger

libsodium, maybe

evbogueOP1y ago

I agree there are more layers you can add on top of TweetNaCl to improve security.

I'm going to personally add you to the list of people Bluesky should hire to get this implemented without the consent of the Bluesky employees. If they choose to hire both of us perhaps we can figure out how to implement this for them.

I will not commit to putting on a furry suit. But I've been known to try everything once. And bonus I live right next to the furry convention center and have always wondered what the heck is going on at the Hyatt while you guys are here.

Kye1y ago

There are over 150 different furry conventions and 80 that have happened in the last couple of years. Which one are you talking about?

1 more reply

j / k navigate · click thread line to collapse