Coggle Reviews

Signed Pages Reviews

Coggle mentions (12)

• I tried and failed

  I find that reflecting on my experiences and going out of my way to really analyze the pitfalls and things done correctly helps a lot. I normally use coggle.it to mind map the whole experience overview and then which elements of the project seemed to be improvements and which parts where potentially poorly executed. I often find a lot more nuance this way than just scanning over it in my head. Source: about 1 year ago

• How do I guide the Web dev?

  In any case, any software that can create a visualization of a tree-like diagram will do the job. I'd recommend https://coggle.it/. Source: over 1 year ago

• Mind Maps

  I have spent more time than I'd like to admit researching the different programs out there. Mindmup , Coggle, and Mindmesiter came the closest, but definitely not perfect. These are some of the features I am looking for:. Source: almost 2 years ago

• Need help reviewing my thought process around organizing my data

  Did it using https://coggle.it .. I have mindmaps self-hosted too but I feel this is much easier on the eye. Source: almost 2 years ago

• Question: is there a comprehensive list of people who are part of the fandom menace?

  Ah, because I found this mapping website called coggle.it and I was just wondering what if we made a map of including all the members of the fandom menace to see how big and how many members or connections they have, that's all really. Source: almost 2 years ago

Signed Pages mentions (12)

• E2EE on the web: is the web that bad?

  There is "Signed Pages" by the debeloper of EteSync. It is a browser extension, that checks webapps based on signatures in the html file. The addon then warns the user if the signature is not correct or - if I remember correctly - the source changed. This allows you to be sure what webapp code was delivered. But it seems like it did not really get used outside of his own projects. - Source: Hacker News / 4 months ago

• Cloudflare and CDNs - call for community opinions

  EteSync has implemented something called Signed Pages, this might be worth looking closer at. This uses PGP keys which is preloaded into the browser; but I suspect that will be a barrier too high for most non-tech users. Source: about 1 year ago

• Truly safe?

  There are also projects like signed web pages which can also help increasing the trust level to some degree. But that requires that you can download the source code and regenerate the verification hash locally - or have other trusted methods to verify the hash value hasn't been modified as well. The current concept is reasonably sane, but it requires too much from users currently to make it widely used. Source: almost 2 years ago

• Security experts declare all Proton apps secure after security audit

  > The server can at any time start serving malicious payloads True, and I call this threat model "Beware Each and Every Fetch" (BEEF) in contrast to the more common TOFU model (although if you trust a desktop app to auto-update itself then these two models might not be all that different). In any case, I think you're being a little quick to dismiss the idea of server-hosted applications. It's true that browsers... - Source: Hacker News / about 2 years ago

• ProtonMail Is Inherently Insecure, Your Emails Are Likely Compromised

  Something like a browser extension for this does already exist, fortunately: https://github.com/tasn/webext-signed-pages. - Source: Hacker News / over 2 years ago