Semisol 👨💻 on Nostr: This means nothing when the frontend could get MITMed and steal your data ...
This means nothing when the frontend could get MITMed and steal your data
quoting note156x…cmn2With our newly released Maple AI and the open-sourcing of our OpenSecret platform code, we're excited to present this technical primer on how we built our confidential computing developer platform leveraging secure enclaves.
Developers today live in an era where user data either sits in plain text in databases or is encrypted in a way that any admin or server with access keys can get ahold of and process their data in any way. This has led to many data leaks in the past.
Current attempts at doing E2EE have burdened the responsibility onto the user in ways where any end-user mistake can be drastic for them. Alternative approaches like iCloud or Google Drive encryption mean that data is often not available to access on all user devices.
Secure enclaves provide a great middle ground. They allow you to verify the code that is running while protecting sensitive data that runs inside a server's protected memory with private keys that only the verified enclave can access.
We built our developer platform on top of Secure Enclaves, elevating the current dev experience into a security-by-design approach on day 1. Our offering provides the developer experience they expect while offering their users great security out of the box.
We offer a powerful combination of user authentication, private key management, encrypted data sync, and private AI inference. This entire stack runs on secure enclaves, protecting users no matter how they use your app.
Our open source dev platform is fully verifiable through reproducible builds and attestation verifications against those builds, so you and your users know immediately that the OpenSecret backend is running exactly what they expect while being protected in memory.
We built Maple AI on top of our platform as a proof of concept, but you can build any app that you can build today. Consumer productivity apps, health tracking apps, note tracking, fintech, and many more can be built on this to protect user data around every corner.
Our developer preview environment is available today. We would love to have you get started building on this secure platform. Join our Discord or DM to get access.
We believe the future of servers will be on top of confidential computing. We're making this accessible to any dev today.
Read more detail in our blog post on this topic. Keep reading this thread for the highlights.
https://blog.opensecret.cloud/opensecret-technicals/