Blog
Security education, encryption architecture, and the thinking behind Secret.Broker.
Security
- Zero-knowledge architecture: what it means and why it matters The server stores your data but can't read it. How that's possible, where the limits are, and why the distinction matters.
- Why you should stop pasting passwords in Slack That password you sent in a DM six months ago is still there. So is every copy of it.
Engineering
- How Secret.Broker encrypts your data XChaCha20-Poly1305 in the browser, a key that never leaves the URL fragment, and a server that only sees ciphertext.