3 pointsby nextguard18 hours ago1 comment
  • java-man18 hours ago

      Every file is protected with AES-256 encryption, the same standard used by governments and financial institutions worldwide. Your work stays private from the moment you upload until your recipient downloads. 
    
    This says nothing. How do the keys generated and managed? Do you store the logs? How can I verify that the javascript contains no backdoor or generates no weak keys, or is consistent from visit to visit?
    • nextguard17 hours ago
      Thanks for the feedback! Hirosend uses server-side AES-256 with a server side key. There’s no client-side JavaScript or key generation yet—though we’re exploring an optional client-side encryption mode for users who the option. Logging is minimal, limited to operational metadata for debugging, never includes anything detailing file or personal information, and logs are automatically deleted daily.