A privacy first period tracker? Is it even possible?
summary
Prototype exists called Pal and it demonstrates a workable privacy first period tracker using AES-GCM 256 via the Web Crypto API for content encryption, PBKDF2 + salt for deriving keys from a user password, client-side storage of ciphertext with salts uploaded to the cloud, and asymmetric wrapping of per-record keys for sharing. Account recovery is intentionally impossible without the user secret, SRP or Blockstack-like auth is recommended, and the Product Hunt launch shows the idea actually runs.
AI-written summary · about
chapters (10)
- 0:00The quest for privacy
- 1:11Data leaks and trust
- 3:54Encryption fundamentals
- 6:15Keys and entropy
- 9:03Implementing encryption
- 11:50Password-based derivation
- 15:20Cloud and client storage
- 19:03Asymmetric data sharing
- 23:36Authentication challenges
- 26:39Building private apps
related talks
27mA privacy first period tracker? Is it even possible?
45mZero Knowledge; Meeting the Growing Demand for Security and Privacy
23mKeeping secrets with JavaScript
29mProtecting data vs systems: practicality, performance, and problems...
50mBuilding Production-Grade End to End Encrypted App...
26mIs it Controversial to Protect Privacy by Violating Privacy?
57mBuild your own Secure Messenger
59mBeyond the Pink: Data Risks in Femtech You Can’t Ignore