f0rest8
MOSSLET Blog Posts
Our latest blog post about how our Unlock Session feature works, similar in experience to a password manager:
What I was encountering before this feature was that the remember me cookie would still be valid but the person’s session_key would no longer exist, causing a poor experience when someone is routed to an authenticated page but is unable to unlock anything from their account.
One solution was to simply redirect to a full login again, but that felt tedious and not “authentic” since the remember me cookie was still valid → making it seem like the “Remember me for 60 days” feature simply didn’t do anything.
It took far too long for me to become aware of this situation, but I eventually did, and our solution was to simply require a password-only reentry similar to your favorite password manager.
This blog also, finally, marks a turning point where I have begun to add/update the open-graph images for each blog post making it more sharing friendly. Cheers and happy holidays to everyone, hope you’re able to spend time with your loved ones. 
I thought I’d make this topic for sharing any “tech” related blog posts from us (rather than in the very big topic where I share general updates) 
First Post!
f0rest8
Last Post!
f0rest8
Following up from the Conversations note back in March — we just finished migrating the majority of Mosslet to be zero-knowledge post-quantum encrypted like Metamorphic (except Mosslet uses Cat-5). 
Posts, replies, groups, journals, profile fields, registration — all of it is now zero-knowledge browser-side, with hybrid ML-KEM-1024 + X25519 sealing. Four phases, four audits, ~230 server-side decrypt sites reviewed. I wrote the whole story up on dev.to including the honest edges (~102 server-side decrypts that remain, what they are, and why):
Building the World’s First Post-Quantum Zero-Knowledge Social Network: A Phased Migration Story
AFAIK it’s the world’s first running in production with customers so I have been running with that headline for now 
. Happy to answer Elixir/Phoenix-specific questions here if anyone’s curious about anything 
Popular in Blog Posts
Other popular topics
Latest on Elixir Forum
Sponsor Spotlight
Courses that'll move you from confusion to "Aha, now I get it!"
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #deployment
- #library
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #channels
- #elixirconf
- #exunit
- #discussion
- #code-sync
- #javascript
- #podcasts
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #elixir-ls
- #phoenix_html
- #iex
- #blog-post
- #graphql
- #genstage
- #ai
- #websockets
- #supervisor
- #elixirconf-us
- #advent-of-code
- #distillery
- #processes
- #api
- #forms
- #metaprogramming
- #security
- #hex
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Error tracking for Elixir devs who love to ship. Start your free account.
Practical resources that improve the lives of professional developers.
Develop your skills with books, videos, and courses.
Enabling companies to succeed by building software people love.
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"