For an app claiming end-to-end encryption, what evidence would earn your trust?

3 pointsposted 10 hours ago
by Brandon-Coll

Item id: 49189897

3 Comments

benoau

8 hours ago

The only truly-trustable option is basically F-Droid's reproducible builds (or similar) with source code availability:

https://f-droid.org/docs/Reproducible_Builds/

Eg this app: https://verification.f-droid.org/packages/com.inspiredandroi...

and its source code: https://github.com/SimonSchubert/Kai/tree/main

You can verify yourself what it is doing, and what was built is guaranteed not to be tampered with.

AFAIK there isn't any evidence that isn't variations of "trust me bro" for the Play Store and App Store.

relug

10 hours ago

"decrypt" button

relug

9 hours ago

and maybe some sort of physical way to share keys via qr or something with clear transparent state visualization. the more you abstract away the cryptography math the less safe it feels with more vectors of attack so it has to be also educational like "this is how proper cryptography works and here is proof we are doing everything by the books" but in friendly ux manner thats easy for children to grasp intuitively