We just have one client. 

The hosted version is the client hosted by us, on our web server. You can 
access it at https://subrosa.io/app/

You can download the client code, and run it from your computer, or host it on 
your own web server. It's identical.

The difference is by hosting the code yourself, you can be assured that the 
correct code is being executed.  

For RSA private keys, user settings, etc, they're all encrypted with the user 
password (through PBKDF2) before being sent to the server. The server is just a 
dumb pipe that stores and passes encrypted information we don't have the keys 
to. 

(Sorry, didn't cc the mailing list)

---- On Tue, 19 Aug 2014 06:07:10 -0700 Stephan 
Neuhaus<[email protected]> wrote ---- 

 > Hi Subrosa Team, 
 >  
 > sounds like an interesting project!  I am however slightly confused 
 > about what you mean by "hosted version" and "client".  Is this a web app 
 > or is it a web app that also has a non-web (= hosted) version, providing 
 > the same functionality, but where stuff (like RSA keypairs, for example) 
 > is stored locally instead of on your servers?  If so, what exactly is 
 > the "client"? 
 >  
 > Fun, 
 >  
 > Stephan 
 >  
 > 

Reply via email to