Yes. My only web interface to the www. I successfully blocked everything and everyone. VPN, filtering DNS, blacklist - you name it I have it. I live in a text world for a decade and I love it. RSS is how I got this.
Top engineers understand. The hardware, the OS, the protocols.They use that understanding to solve problems. The comprehension is the differentiator between top and anyone else.
When you add recipient your message is (decrypted using your id) copied and the copy is encrypted with the recipient email. Once the recipient logs in (their OAuth id becomes available) the email (verified by the OAuth) is used to decrypt the message copy and encrypted again this time with his/her id. That temporary email encrypted message is decryptable of course although there is no utility or UI for us to do so.
I guess we'd better store the owner Id and don't make copies, since it doesn't change anything security wise ... Yes, rogue admin can do harm ...
That shouldn't be possible, everything is encrypted with the OAuth provider ids that are not stored and available only through the login ... then again SSH was broken ...
People are raising valid concerns about your product, and instead of listening and accepting early feedback from HN, you are all over this discussion, defensively arguing with everyone. Just sit back, hear what people have to say, and then decide for yourself if you want to make changes, or reject the feedback.
It really comes down to "we need to know you are around". Month is acceptable cycle, email or card it's up to you. The email assumes you are the only one with access to that email.
You are not cheap (cause I think the same) so there is the email option. If you value your one click a month less than $1 then that should work? Thanks!