1 min read By NT²
E2E chat is not a vault
Stories
Signal can protect a message on the way to someone else. It does not turn the thread into structured storage.
Tagged: privacy
19 posts
9 min read By NT²
Selective SSI — not a general DIDComm wallet
Tech
Self-sovereign identity is useful when you take the parts that fit a zero-knowledge vault—and refuse the parts that turn the product into a general DID wallet.
9 min read By NT²
Relay indexes ciphertext; Inbox stays local
Tech
A cloud can help deliver sealed packages without becoming the place where pending shares live as readable mail. Relay indexes ciphertext. Inbox stays on the device.
1 min read By NT²
I outgrew Apple Notes
Stories
Apple Notes was perfect for grocery lists, travel ideas, and quick reminders. Then it became the place for passport numbers, seed phrases, and bank details.
8 min read By NT²
Share passphrase ≠ master password
Tech
A share that opens with the same secret that unlocks the vault is not a handoff. It is a remote unlock of everything. NT² keeps those boundaries apart.
1 min read By NT²
Your data, your jurisdiction
Stories
Where data lives shapes who can touch it, process it, subpoena it, lose it, or monetize it.
9 min read By NT²
Challenge–response, not bearer email
Tech
Cloud services often treat an email inbox as the root of an account. An encrypted vault needs a different proof: control of a signing key, shown by answering a one-time challenge.
1 min read By NT²
No analytics on the marketing site
Stories
A privacy product should not ask you to accept tracking just to read its privacy promise.
1 min read By NT²
Offline by default is not offline-only
Stories
A vault can work offline and still offer sync. The difference is whether the cloud becomes the owner of the data or just a blind carrier.
1 min read By NT²
Look at my screen, not my vault
Stories
A friend asks to check the account number. You want to help, but you do not want your unlocked vault in someone else's hands.
10 min read By NT²
The account database must not become a password oracle
Tech
An account table can contain no plaintext vault items and still create a dangerous password-testing surface. We removed the columns that could turn a database copy into an offline guessing or recovery system.
1 min read By NT²
Timed reveal on a video call
Stories
The person on the call needs to confirm one field. Your screen is ready to show an entire document.
9 min read By NT²
One sync hub for one vault identity
Tech
A vault does not need to enter a shared plaintext mailbox to sync. Its public cryptographic identity can name a dedicated edge coordinator that notifies replicas and points them to encrypted frames it cannot open.
9 min read By NT²
Blind replica sync on the edge
Tech
Sync does not have to turn a local vault into a cloud database. The edge can identify an account, store opaque replica frames, and deliver updates without learning what those updates contain.
1 min read By NT²
Sometimes a USB stick beats email
Stories
If the file is too sensitive for a chat thread, sending it through one more inbox is not automatically better.
2 min read By NT²
One-time disclosure for your lawyer or accountant
Stories
Your accountant needs the statement today. They do not need a permanent copy sitting in three inboxes and a downloads folder.
9 min read By NT²
Unlocking a local vault is not logging in to the cloud
Tech
One screen can make two security events look like a single login. We keep them separate because opening encrypted data and proving an identity to a server are different jobs with different risks.
1 min read By NT²
Work vault, personal vault
Stories
Your laptop holds client API keys, a family insurance policy, and a crypto wallet note. The problem is not storage space. It is boundaries.
6 min read By NT²
Why host a heavy server when a PWA can do everything locally? Built a zero-server privacy vault.
Tech
In the era of massive cloud-first applications, we often overlook a powerful alternative: the Progressive Web App (PWA). Why maintain a heavy, expensive, and potentially vulnerable server infrastructure when the modern browser is capable of running a full-featured, secure, and high-performance application entirely on the user's device?