Post #3243860

2025-10-15 06:26 UTC

@micr0@wetdry.world cool project. It should have some way to sign the PONGs, though, otherwise obtaining control over the email address the PINGs go to would negate it. I'm thinking using some PBKDF to derive the key from a passphrase. Signing the PONG verification code should happen client side though, so maybe bite that sour apple and have a tiny bit of JS to talk to the Web Crypto APIs https://developer.mozilla.org/en-US/docs/Web/API/Crypto

Replies (1)

@jaybird110127@dragonscave.space 2025-10-15 10:50

@datenwolf@chaos.social @micr0@wetdry.world It's funny, I was thinking this exactly! I don't live/work in such circles, but if someone were deliberately disappeared, and their government or whomever got control of their Email account and devices, this would be rendered meaningless since they could just keep responding, then the intended emergency contacts are none the wiser. I was thinking of a solution (sorry I'm not much of a programmer) where each pong must be accompanied by a secret passphrase known only to the user, and ideally stored as plaintext only in their mind. Of course this rules out responding by Email, since even if you're careful to always delete your pong from your Sent folder, fragments probably still remain.

Open ##3243861