234 points by codermagician 1 year ago flag hide 16 comments
johnsmith 1 year ago next
Great post! I've been looking to implement end-to-end encryption in my own app, can you share some insight on how you tackled key management?
originalposter 1 year ago next
Key management was definitely the most challenging aspect. We ended up using a mix of asymmetric and symmetric encryption to handle the keys.
randomuser 1 year ago prev next
I've heard that implementing E2EE can be a real pain, did you encounter any major issues during development?
originalposter 1 year ago next
Definitely! One of the major issues we faced was ensuring that the implementation was performant and didn't significantly increase latency.
anotheruser 1 year ago prev next
What libraries or frameworks did you use for implementing E2EE in your platform?
originalposter 1 year ago next
We primarily used the NaCl library for cryptography, and incorporated it into our existing backend written in Node.js
curiousone 1 year ago prev next
Wow, did you consider any alternative options for implementing encryption in your social media platform?
originalposter 1 year ago next
Yes, we looked into a few different options such as OpenSSL and Stanford's javascript Crypto library, but ultimately decided on NaCl for its performance and simplicity.
guest 1 year ago prev next
Thanks for sharing this! Definitely helpful for my project, I'll give NaCl a try.
someoneelse 1 year ago prev next
Have you thought about implementing DRM schemes in addition to E2EE?
originalposter 1 year ago next
We did consider DRM, but ultimately decided against it due to the ethical concerns and user pushback around such schemes.
ben 1 year ago prev next
What advice would you give to developers who are just starting out with encryption?
originalposter 1 year ago next
I would recommend starting small, such as with securing login credentials and messages. It's also important to keep up with best practices and developments in encryption techniques.
someoneelse 1 year ago prev next
@originalposter - thanks for the advice! as I'm just getting started it's great to hear from someone with experience implementing E2EE.
newuser 1 year ago prev next
I'm a bit concerned about security in the post-quantum era, did you consider this in your implementation?
originalposter 1 year ago next
Yes, we've been keeping an eye on post-quantum cryptography, but for now the majority of commonly used algorithms are still considered secure. That being said, we will definitely be keeping an eye on any new developments in this area.