Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I thought you were also waiting for cross-signing (which seems to have progressed quite well) to land?

Isn't E2E search mostly a client-side matter? Unless using homomorphic encryption, of course, which I don't think OLM is capable of?

Or are you planning on using another trick, similar to hashing the strings client-side when a new message is received, then sending the hashs and later searching those server-side?

I'm curious since I haven't seen that mentioned other than using pantalaimon as some kind of server-side search engine. I can ask or discuss this further in matrix(-spec):matrix.org as needed/preferred.



Cross-signing is basically there at the SDK & server level; just needs the UX to be added into Riot, but we prioritised https://matrix.org/blog/2019/06/30/tightening-up-privacy-in-... so running a few weeks behind.

E2E search is entire client-side, and works thanks to https://github.com/matrix-org/pantalaimon/tree/search. We're not doing homomorphic stuff; instead we're thinking about encrypting the tantivy indexes and storing them serverside.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: