Hacker News Reader

How exactly is post encryption implemented? How do viewers decrypt the content (key management)? Where is it decrypted? In the browser? Server-side?

In the end for me the question is: How can I trust you to not leak my private posts? Why should I not continue using Signal groups? I realize that I’m probably not your main target group.

View on HN

Have covered this question in a few replies but in short: anything you share on Circles is encrypted in transit with SSL/TLS and encrypted at rest on the server. We hold the keys, at least for now until we implement a better solution. Posts are decrypted server-side and are encrypted in transit with SSL/TLS.

You can trust us because we say we are going to respect your privacy and we need to build trust and do what we say we will in order to build a great brand. I understand this often isn't enough and trust has been abused by other companies, and for that we'll keep pushing on the privacy front of the product.

Reply on news.ycombinator.com