It is clever that you put the encryption key after the hash sign ("#") component... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		mapgrep on March 21, 2018 \| parent \| context \| favorite \| on: Airborn: Create and edit files online, securely It is clever that you put the encryption key after the hash sign ("#") component of the collaboration URL, so it never touches your servers.

yoavm on March 21, 2018 [–]

Don't trust it as a security measure though - it's very easy to read the hash data in JS and then submit it to the server.

twiss on March 21, 2018 | [–]

Certainly - although the JS can also just read the document and submit that. To make sure that it isn't doing either, you'd have to read the code on GitHub.

Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact