Hacker News new | ask | show | jobs
by croissants 2140 days ago
I like this idea, but both credit card info and password is a big trust ask for what looks like a fairly random website.
1 comments

Do you think it would help if it was open sourced?

Credit card info is handled by square who Iframes all user inputs so I can’t see it.

Password to unlock the pw you need a key, nonce, encrypted message. My server only ever sees the nonce and message. The user only ever has all 3. Even the bookmarks you create use hash-bangs which don’t go over the wire.

The hard part for me is conveying all of that without a wall o’text.

Maybe I can reach out to givewell, and get their thoughts. They’d bless it maybe?