Yeah this is completely valid and I’d already anticipated this, the challenge is how to get things encrypted whilst allow fast search. The system is actually already close to “zero-knowledge” and everything is encrypted at rest and transport but the vector search -> mcp server is the weak link there. The system is setup that you can’t actually create oauth keys if I’m not logged in as the server owner so that’s is secure, but there’s nothing that stops me from being able to change that, so we need to work out one final step, then it just wasn’t realistic for the mvp. However, a zero-knowledge system is the goal
This is cool but that’s a big sell on uploading my life to yall without all sorts of security compliance and/or encryption options.
Zuck: I have over 4,000 emails, pictures, addresses, SNS
[Redacted Friend's Name]: What? How'd you manage that one?
Zuck: People just submitted it.
Zuck: I don't know why.
Zuck: They "trust me"
Zuck: Dumb fucks
Etc etc
Yeah this is completely valid and I’d already anticipated this, the challenge is how to get things encrypted whilst allow fast search. The system is actually already close to “zero-knowledge” and everything is encrypted at rest and transport but the vector search -> mcp server is the weak link there. The system is setup that you can’t actually create oauth keys if I’m not logged in as the server owner so that’s is secure, but there’s nothing that stops me from being able to change that, so we need to work out one final step, then it just wasn’t realistic for the mvp. However, a zero-knowledge system is the goal