Paaster – Secure by default end to end encrypted pastebin

by wardpearce • 4 years ago

49 17 4 years ago

dane-pgp• 4 years ago

Can I trust a instance of paaster not hosted by me?
No. Anyone could modify the functionality of paaster to expose your secret key to the server. We recommend using a instance you host or trust.

That's refreshingly honest, but I hope that some day a technology like WhatsApp / Cloudflare's recently released "Code Verify" extension helps to solve this.

https://inside.com/campaigns/inside-dev-2022-03-11-31674/sec...

jimsi• 4 years ago

I think that providing API to be used by standalone clients is far more better approach

derefr• 4 years ago

AFAICT you could permanently trust a webapp loaded from an IPFS-scheme URI (as e.g. Brave can do), after it’s been audited once.

fastball3• 4 years ago

But then if you're using an IPFS gateway instead of hosting your own instance then the gateway could serve you different content, no?

indigodaddy• 4 years ago

Text input seems to be broken on mobile? (iOS Chrome)

bts4• 4 years ago

Pinterest open sourced a similar tool a few years back - Snappass: https://github.com/pinterest/snappass

amir734jj• 4 years ago

I wish there was a way to create a link which doesn't contain the password so I can send the password separately.

bennyp101• 4 years ago

Looking at https://github.com/WardPearce/paaster/blob/Development/paast... the link is just concatenated with # - navigate(`/${pasteId}#${paste.clientSecret}`)}

So you could just copy the link as everything before the # and send the rest as the password separately

fastball3• 4 years ago

Yep, that's exactly how it works.

It's the same concept as how mega.nz do their E2EE.

est• 4 years ago

Might as well use WebRTC to establish realtime e2e p2p pasting.

Biganon• 4 years ago

https://0bin.net/ has existed for quite some time now

Paaster – Secure by default end to end encrypted pastebin

Related Stories