Hacker News new | ask | show | jobs
by stevenicr 1922 days ago
thanks for the heads up and consideration!

I'd like to suggest more prominent mention of the E2E stuff.. the bitwarden site currently has a big bold E2E as the top left block under the header block.. and on the send page there is a prominet block about security and blah blah that you can't miss these even if you are scrolling/skimming fast.. I looked for that info on your pages including the /resources/download/ and the home page. Did not notice any mention of encryption.. in transit, at rest, anything.. I even stopped the scroll and read the paragraph under heading "Private File Sharing " - the top left / 1st info block under the cover/heading block..

At that point I wrote it off as not having E2E.

glad that it does - and certainly after the latest Msoft Exchange hack - One might think that every business would demand all emails and similar web transfers are encrypted at rest and in transit.. I certainly look for such.

My experience with free is that it's either bad for privacy or the company is not real legit and is going to change at some point drastically, so I don't get caught into those traps I avoid getting invested into them. From google to rtMedia - free transactions either fail / die / change or they profit by slaying your privacy or time or something eventually..

I certainly prefer to buy once to own software and consider paying for an upgrade after a year if new features are added.

I get it that it's a legit and, common, and profitable way to earn and keep earning by getting business on a monthly / yearly fee.. Not my preference, but it works..

I would want to know what happens to any data if the fee stops being paid if I considered such a thing - and what backup plan there was if the company shut down as well.

I appreciate your work and you taking the time to respond, I hope you are successful in making at least parts of the world more secure and private! Whether I can afford it or not I think it's great!

2 comments

Great feedback on the E2E emphasis - will do that.

Check out https://support.diode.io/article/0joq168vfe-how-does-diode-m...

If you stop paying, the only thing that happens is you lose the ability to use certain features (e.g. password protected public shares) - data / file access is all the same across plans. Also, since the files are actually all resident on systems you own/control, you have a second layer of assurance there.

We'll give some thought about how to support a perpetual license path - it may be sustainable given certain assumptions.

Thanks for the great perspectives...

Hey there - have added E2E text to home page - thanks again for your input.