76 karma · joined December 27, 2019
The implementation of E2EE must be robust and there must be somebody who is actually checking the source code (plus verifiable builds)
One thing you might want to consider is having one domain for a website about collectednotes (collectednotes.com) and another for hosting user's blogs (collectednotes.blog for example) because it is currently not clear what urls are official and made by you and which are just blogs made by anyone.
For example, https://collectednotes.com/accounts/ is genuine and made by you whilst https://collectednotes.com/account/ is a blog I just created. To me there seems a very real risk of users being mislead.
Just look at SARS for an example of where trusting the official information from China made for a terrible idea.
>it sounds like he was doing it wrong.
What? No.