Hacker News new | ask | show | jobs
by lern_too_spel 2201 days ago
Encrypted chat is an app, not an OS API.
2 comments

I mean it could be part of the OS. It would be kind of cool if your OS could have an API to encrypt private user data with some key that only the other persons OS can decode.

Chat apps could then delegate security to the OS, rather than having to trust that the app developer has a security team that knows what they're doing.

You could even take it one step further and have the plaintext of the users messages secret from the app - the OS would draw them direct to the screen. A bit like opaque cross-origin data in webpages is secret from JavaScript on the page.

Why would you trust Google with that though?
Right. Implementation of encryption is the easiest part to fuck up and/or backdoor.
I trust Google more than I trust ZSpeak, Chatopotimus, LolTalk, or whatever the next big VC-backed chat app is.
Encrypted chat is included by default with IOS. It could be with Android by Google as well, it still isn't.