← Back to context

Comment by tredre3

10 months ago

> Privacy Respecting Encrypted Link Shortener

You seem to be doing server-side encryption? I guess "Encrypted" is technically true but since your server/vercel sees the clear URL and password it's not terribly useful.

You also send all URLs to Google? It would be nice if you at least used the offline safebrowsing database instead!

That safe browsing thing is more recent. I was receiving so many requests from the Italian government that I had to do something quick, otherwise they'd have shut the website down.

As for the logs, vercel only has runtime logs. I do not store them. This is why it’s “privacy respecting” and not “privacy protecting” because maglit is not supposed to be the end all be all for privacy but It does have some nice security and privacy features for a FOSS project.

The amount of scammers that used it before the safe browsing check was insane. People used to message me about how some links were being used to create fake links for their profiles and what not.