Hacker News Reader

I used to use Evernote but now I have completed Switched to StandardNotes which has end to end encryption. Link: https://app.standardnotes.org/

View on HN

If it legitimately uses end to end encryption, then them hosting a webapp which presumably allows you to view and edit your notes seems odd.

Even if it asks for your vault key each time, since they control the JavaScript delivered to the webapp, it largely negates the benefit of E2E encryption.

The key could be only on the client side, derived from your password. Ok they could be evil and send it to their server in the next update, we will have to trust them not to do so.

> we will have to trust them not to do so.

famous last words

If the argument is trust, then end to end encryption isn't much of a selling point, you could make the same argument when they have raw access to the messages themselves.

> Even if it asks for your vault key each time, since they control the JavaScript delivered to the webapp

How is that any different from a malicious app you have on your phone or desktop? Assuming that the web client is served entirely over HTTPS MITM attacks shouldn't be possible and the project maintainer is the only remaining bad actor. Which is where trust comes in.

This will link directly to the web app. For more info about Standard Notes, feel free to check out https://standardnotes.org

Reply on news.ycombinator.com