Magic Wormhole: Get things from one computer to another, safely
From the section titled &quot;Motivation&quot;: &quot;Copying files through Dropbox is not secure against the Dropbox server [and results in ...]&quot;<p>Let&#x27;s say a user encrypts a file outside of Dropbox, using a program of the user&#x27;s choice, then she transfers the encrypted blob to Dropbox.<p>Is the author suggesting this is &quot;not secure against the Dropbox server&quot;.  I am not a Dropbox user.  I know it was originally for syncing folders and they orginally used an rsync library and that is about all I know.  Pardon the ignorance.<p>Magic Wormhole by default uses hardcoded host:port for a rendezvous server and a transit server operated by [undisclosed].<p>&quot;The URL of a public server is baked into the library for use as a default, and will be freely available until volume or abuse makes it infeasible to support.&quot;<p>This Github page is only for the client, not the servers.<p>In the section titled &quot;Dilation&quot;, we are reminded that MW is store and forward by default, not direct connection.<p>How are messages stored on the default public MW server operated by [undisclosed] &quot;secure against [undisclosed]&quot; in a way that messages stored with Dropbox are not &quot;secure against Dropbox&quot;.  Maybe the author only uses MW with private MW servers, not public ones run by other people.  Then his comment about Dropbox would make sense.  However I have to wonder, how many new MW users are running their own servers.