Hello HN,
Over the last year we've been building snote.app, a Privacy focused, End-to-End Encrypted alternative to Notion. You can write, plan, collaborate and get organized - it allows you to take notes, store files, add tasks, manage projects & more. Whether you're working solo or in a team. We are hoping to use this post as an opportunity to collect feedback from fellow hackers. If there's anything we can do better, please let us know |
But, the bigger question is, for something shared here on hacker news where an abundance of developers dwell: why would we not create our own ~500 lines note taking synchronization function with built-in end-to-end encryption?
I mean use your favorite scripting language, even on your laptop, and you could theoretically make something that is very easy to audit and maintain. There is no need for extreme complexity with thousands of lines of code (or untrusted closed source software for that matter). Just something simple to keep your notes encrypted.
Oh wait, we got KeepassXC already (although that is a very complex program and hard to review for us outsiders that do not know the code. Etc. Etc.) I personally do not have time to review such code, and so, it remains a matter of trust for me. I still prefer it because it is open source.
thanks for taking the time to comment, I'll update this thread when we open source it
Then when someone takes a look and notices that you're storing the users' RSA private keys on the server, they can check whether you actually meant to do that.
Also: Don't store (or ever even have) your users' RSA private keys server side!
in the meanwhile, sure, we don't store private keys on the server side :)