Skip to content

Comment on One-time Secret: Share passwords etc with URIs that work only onceparent

Comments

I'm thinking that their unique ID (31 char) plus the key (AES 22) is a little long for a URL:

http://example.com/1234567890123456789012345678901/123456789...

I do like the idea though of keeping the secrets safe with a client-side (or non-stored) key. So long as it's known that it isn't about keeping the server honest, since you have to implicitly trust that they won't be storing the key.

TinyURL is currently giving out 8-character identifiers; I'm confident that those 31 characters can be trimmed a bit. ;-)

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.