Hacker News Reader

Comment by I_am_tiberius | Hacker News Reader

Does anyone know of a tool that can e2e + collaboration (or in other words: notion but e2e)?

Anytype. Local-first, p2p sync with e2ee. It uses the notion model (everything is an object, you can create "databases" with queries of objects). It doesn't store markdown directly I believe, but it can export into markdown perfectly.

I recently moved to anytype from logseq as it hit for me all the right notes for personal stuff, shared family stuff and work stuff.

I wanted something like notion but faster and most importantly, private.

We're building https://thymer.com/ to do this. Real-time collaboration, local-first + end-to-end-encrypted (and optionally self-hosted).

Cool. May I ask how you implement the collaborative e2e? Do you encrypt the content multiple times - once for every user?

The workspace data is encrypted with a (symmetric) workspace key. Each user gets hteir own encrypted copy of that key, using the user's public key. By wrapping the data-encryption key for each user the content is only encrypted once but each authorized user can decrypt it.

Ah ok. I guess that means when a user leaves the team, you have to re-encrypt the codebase with a new symetric key (as the user would still know the old symetric key)?

Depending on the threat model you want to protect against, yes. For example, although a revoked user doesn't have direct access to data anymore, they could technically collude with us to get future encrypted messages and then decrypt them. At the moment rekeying is only possible by exporting a workspace, changing its key (with a command line tool), and then reimporting it.

I didn't want to sidetrack you with this. I just wanted to know if I understood correctly. I believe this is nothing you need to worry about at this time. Thanks.

Maybe Anytype, or self hosted appflowy

Reply on news.ycombinator.com