Hacker News Reader

Comment by untitaker_ | Hacker News Reader

From a first glance, Flock seems to do end-to-end encryption over CardDAV/CalDAV. DAVdroid is, as the name implies, just a sync client for CardDAV/CalDAV servers -- no end-to-end encryption.

If you value privacy that much, Flock seems interesting, while the lack of end-to-end encryption in DAVdroid has other advantages (e.g. ability to use server's web UI, compatibility with other clients)

View on HN

What do you mean, "end-to-end encryption"? How should contacts/events be transferred encrypted from/to a CalDAV/CardDAV server? Those servers expected icals and vcfs, not encrypted data.

I don't know myself, this is just what i gathered from the README. It might be possible that they're still producing valid iCalendar and VCARD files, but with a lot of ciphertext in them.

That might be, but then CalDAV/CardDAV would be reduced to WebDAV, so it would only be a WebDAV-Sync (because the server couldn't reply to CalDAV requests like "show me events between xx and yy"). As far as I have seen, Flock only "encrypts" the connection, say, is using SSL. But please correct me if I'm wrong!

It specifically states that it does end-to-end-encryption (which is not SSL). I know the authors, and IMO they're not the kinda guys who throw around with buzzwords.

i just can't imagine how this should work (to avoid saying that it can't work), so some specs or more information would be useful.

Reply on news.ycombinator.com