Ask HN: Would you trust encryption at the mobile keyboard layer?

3 points by dkatsura 109 days ago 2 comments
Summary not yet generated for this article.

Original Text

Most private messaging advice says: use a secure messenger.

That makes sense for transport and server-side privacy, but every mobile message exists somewhere before it reaches the messenger. On Android that place is often the keyboard/input layer.

Questions:

- Would you ever trust a keyboard for encryption-related workflows? - What would such a keyboard need to prove before you considered it safe? - Is privacy at the input layer useful, or does it create too much trust friction? - Is local-only/no-network enough, or would you need open source/audit?

No product link. I am trying to understand the threat model and UX objections.

Comments (2 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open