Metadata encryption with client-side passphrases

[mgomezch]

Describe the Feature

Allow client-side / end-to-end encryption of certain metadata used for clients to display entities, to preserve privacy without sacrificing data portability.

In particular: it should be possible to create moderation lists with private names and descriptions. Users would enter a client-side-only passphrase used to derive a symmetric encryption key deterministically; then, when creating a moderation list, users would enable a creation-time option to make the new list's metadata private. The app would then create the moderation list in the user's repository with an encrypted name and description, without the encryption key or the cleartext name and description ever leaving the device.

This would allow users to manage moderation lists for with the convenience of their lists being labeled in accordance with their specific purpose, and without making this data application-specific or non-portable, but without publicly associating accounts listed in those lists with those labels.

For example, I could make a moderation list privately titled "people who enjoy Nickelback" without worrying that users in the list would sue me for insult or defamation, which could be a problem in some countries; see e.g. https://law.yale.edu/mfia/case-disclosed/germanys-netzdg-and-threat-online-free-speech

Attachments

No response

Describe Alternatives

No response

Additional Context

No response