Hacker News new | ask | show | jobs
by codecaine 5374 days ago
did you do the JS implementation of PGP yourself? Really cool service btw. Maybe you could write up a nopaste-tool which encrypts the stored contents before they get posted to your server.
1 comments

I actually use the Javascript PGP implementation found here: http://www.hanewin.net/encrypt/ but I do plan to implement my own soon. I'm hoping to add a file encryption utility too, but I don't think the current PGP implementation will allow that so easily.

I'm not quite sure I understand what you mean by a nopaste-tool?

Thanks for your feedback! :)

The first, second, and really all the rules of encryption are that you should not write your own encryption code. And as others have noted, there are fundamental issues with doing such an implementation in Javascript at all.

Please consider the social consequences of pushing encryption which is very likely to be flawed to those who may not know better. If you wish to play (and who doesn't?), then it should be done among people who study cryptography and its implementation for a living.

I don't know what the term for those sites is. Something like http://nopaste.info/. How do you plan to implement file encryption in JS?
I was hoping to use Javascript to encrypt the file locally and then upload the encrypted file to my servers for email or downloading. I'm not really sure on exactly how I would do it yet. :) Maybe with some HTML5 local storage?