Timeline for Group Instant Messaging: How to securely store messages on the backend while supporting cross-device message history in a group chat?
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 18, 2023 at 23:46 | comment | added | ThoriumBR | And if someone steals the encrypted private keys, 2 minutes per account per password trial will be insanely expensive to crack. | |
| Mar 18, 2023 at 23:46 | comment | added | ThoriumBR | If you use Argon2 with a very large difficulty to derive the key from the user's password, it should not matter. It does not matter for the client if the key derivation takes 2 minutes when he installs the app on a new device, and you can use the account password for that. | |
| Oct 30, 2020 at 8:56 | comment | added | lm2s | @user Well pointed. In our case we don't want to do that because the users tend to choose weak passwords and there might be confusion to if it's the account password or keys password. But it's definitely something to consider. | |
| Oct 29, 2020 at 17:31 | comment | added | user | Private keys can be stored on the server if they're encrypted, then it's just a matter of having some way for the clients to decrypt the keys when they take them off the server (passphrase/keyfile/etc.). | |
| Oct 29, 2020 at 17:25 | review | First posts | |||
| Oct 30, 2020 at 11:54 | |||||
| Oct 29, 2020 at 17:19 | history | answered | lm2s | CC BY-SA 4.0 |