logoalt Hacker News

redgridtacticalyesterday at 8:03 PM1 replyview on HN

The read-only past is a really smart design choice. I build local-first apps and it's always tempting to add edit-everything flexibility, but constraints like this are what keep a tool focused and actually useful.

How does the Supabase sync work with the E2E encryption? Client-side encrypt before anything leaves the browser?


Replies

katspaughyesterday at 8:10 PM

Thanks! Exactly, client encrypts before syncing. Decryption keys are wrapped/encrypted with your password. If you change the password, only the decryption keys are re-encrypted, not your notes.

show 1 reply