132
submitted 1 month ago* (last edited 1 month ago) by dl007@lemmy.ml to c/opensource@lemmy.ml
you are viewing a single comment's thread
view the rest of the comments
[-] chebra@mstdn.io 0 points 1 month ago

@peregus It's explained in other threads here. The key is in the url but behind # and that part is invisible to the server. protocol://host:port/path?query#fragment, server will only see ..?query, so both participants can decrypt, but server can't => E2EE

[-] peregus@lemmy.world 1 points 1 month ago

But it's the server that creates the URL in the first place, so it must knows it, right? ...or wrong?

[-] chebra@mstdn.io 1 points 1 month ago

@peregus No that would be created by javascript in the sender's browser.

[-] peregus@lemmy.world 1 points 1 month ago

Oh, ok, now I get it. So it could be checked by a third party if that code is really created by the browser and if it's not sent to the server, correct?

[-] chebra@mstdn.io 0 points 1 month ago
[-] peregus@lemmy.world 1 points 1 month ago

@chebra@mstdn.io but the owner of the server could change it, could it be checked directly on the webpage of the service? Not that I will do it (I can't, I can't read that code), I'm just curious.

[-] chebra@mstdn.io 2 points 1 month ago

@peregus yes, well the javascript on the site is minified, but I found this place even in the minified code. At this level it would be easier to take the source code and compile your own, host your own instance, then you know exactly what code is running there. And their minified code could be directly compared with your minified code... the beauty of open-source software.

[-] peregus@lemmy.world 2 points 1 month ago

@chebra@mstdn.io Thanks a lot for your time explaining that to me!

[-] chebra@mstdn.io 1 points 1 month ago

@peregus You're welcome, stay curious!

this post was submitted on 05 Nov 2024
132 points (98.5% liked)

Open Source

31712 readers
237 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago
MODERATORS