← Back to context

Comment by hamdingers

2 days ago

> you already trust Kagi enough to feed them your entire search history

Not necessarily, Kagi provides a feature[1] that anonymizes all your searches. I set it up and haven't thought about it since.

1. https://help.kagi.com/kagi/privacy/privacy-pass.html

They give you a key and only if you have a higher tier account. The act of doing that requires that there is a step in the process where they know you’re requesting a key and who you are. They could bind them in the backend if they wanted, before giving it to you.

You’re still trusting them. Not to mention they could round them all up by IP or browser fingerprinting.

There is still some level of trust.

I happen to trust them enough for that; but it is still trust.

  • I am not an expert in the underlying cryptography, but the claim is indeed that the cryptographic approach makes it impossible for them to link the key to the queries in the backend.