Hacker News Reader

I'd like to hear HN's take on ShareLock. I think the service is ingenious; my only issues after using it for so long:

1) The 500 character limit

2) If you enter someone's Gmail, and it's actually one of their aliases, then they can't decrypt the message when they sign in.

View on HN

I don't understand how this relates to the original post. ShareLock is not end-to-end encrypted.

It solves the issue of secret-sharing much better than any of the other proposed solutions here, including InstaPass. You can post the URL in a public channel with confidence, as even if an attacker accesses the URL, they have to verify themselves with their social identity to decrypt the data.

But yes, it's not end-to-end encrypted, so you're better off self-hosting your own instance of sharelock.

Reply on news.ycombinator.com