MeteorDevelopment / meteor-client

Based Minecraft utility mod.
https://meteorclient.com
GNU General Public License v3.0
2.24k stars 827 forks source link

[Suggestion] Message encryption #683

Closed sbxte closed 3 years ago

sbxte commented 3 years ago

Description I was reading the discord server the other day and saw the idea of encrypting messages in chat and only meteor users could decrypt it. However instead of using base64 or Caesar cipher (which can be easily decrypted by people who have an iq of atleast 20) we use a vigenere cipher instead.

HENRYMARTIN5 commented 3 years ago

noice

CountBleck commented 3 years ago

The whole idea sounds insecure. Why not use AES on the message and send the Base64ed result? I don't see a use for an encrypted prefix since Meteor would have to try and decrypt every message and see if there is a prefix, which would be a waste of time. There's no real advantage to an encrypted prefix. Also, anyone can access an API, unless authentication is required. What would you authenticate with? And what's the use of encrypting a message for all Meteor users to see anyways?

sbxte commented 3 years ago

Now that I think of it, yeah you're right. It's pointless and also insecure.

CountBleck commented 3 years ago

Also, I think people could take advantage of this to slow people's computers down a tiny bit by spamming the chat with a bunch of encrypted messages that Meteor would have to waste time decrypting for no reason at all. Isn't there also a limit to the number of characters in chat messages? Just use Discord, Guilded, etc., or, if you're extra paranoid, Matrix.