As mentioned earlier, not a single byte of information should fall into the developer's hands.
The confidential chat app should only use an independent infrastructure that is not controlled by the developer. Cloud services such as Dropbox
, Google Drive
and many others
have become very popular methods of sharing
and syncing. They are convenient and easy and
safe to use. Is it possible to use them as a tool
for private messaging app?
The answer is … yes! An encrypted messaging app
may use protected cloud services like an
independent server from the developer.
In such services, there is a familiar mechanism called
a shared folder, which is perfect for this role. In such
a scenario, the encrypted messenger encrypts your
message and sends it to your shared folder in your
account. Your chat partner downloads the message
from the shared folder in his/her account, decrypts it,
and reads it. After that, the encrypted message is
deleted from the shared folder and from both devices.
You control your folder and can choose who can
access it, which completely eliminates spam.
What could be easier and more reliable?