Hacker News new | ask | show | jobs
by vbo 1394 days ago
I don't think touting no E2EE is going to get you more users. Fine, don't do it, but I'm pretty sure the people who want E2EE (myself included) are likely very convinced it's what they need and will act accordingly. And those who don't care for E2EE won't care whether you offer it or not.

Irrecoverable data loss is a real pain in the ass that needs to be dealt with but it's the only way to achieve true privacy. Knowing you can't decrypt my data whether by your own will or coerced by your government (which may or may not care about privacy now or in the future) or at the whim of a North Korean hacker, keeps my mind at ease. Why on earth would I give that up? Google has Keep, Apple has Notes, they do a pretty decent job as far as basic notes app go. Sorry if this sounds like putting you down, I'm sure you put a great deal of work into your app and you seem passionate about it and I'm sure it's great. But because the table stakes in the notes games are high, you need to go above and beyond what your competitors offer. Not just great UX, but pushing _every_ boundary in the space, including by offering privacy. I feel like in 2022, privacy is non-negotiable. Make it optional if you feel you must, or don't, but don't suggest skipping E2EE is in any way a virtue.

2 comments

Yep, getting more users wasn't really the goal of this blog post. Mainly it was intended as a response to the many support requests we get asking about what kind of encryption is utilized in Supernotes, which frequently lacked a clear understanding of different types of encryption and what that means. That is why I tried to structure it as a helpful tutorial that anyone can read to hopefully gain a better understand of encryption basics.

Our current set of priorities means that E2EE is not going to be at the top of the list for the foreseeable future, so we want existing and potential users to be aware of that (and our rationale behind it). We prefer to have users that understand and align with our vision rather than trying to convince/trick people with different priorities to use Supernotes.

Implementing E2EE encryption safely is difficult. If it's not your core competenancy, should you really expect them to do that? If you don't know what you're asking for.

If you're not a paying customer and you are not willing to buy the product, what causes you to think they'll do what you think they should do on arbitrary principles (that you might still not buy the product even if they implemented it) rather than practicality of reality. Why should they listen to voices on the internet who aren't even their customers?

Expecting other people to do more for you without giving anything in return is some thing I don't like.

> Why should they listen to voices on the internet who aren't even their customers?

People tend to exchange and discuss ideas on HN and this is no different.