Anyone know what the story is about cryptpad.fr?

[tomjennings@tldr.nettime.org]

Anyone know what the story is about cryptpad.fr? A local ICE watch group is using it, and scam detector gives it a very low rating.

[mcc@mastodon.social]

@tomjennings An open source project I worked with used it as a total google docs replacement… we liked it. Isn't there an about page talking about who's behind it? It isn't loading for me today.

[tomjennings@tldr.nettime.org]

@mcc

OK good to hear! Everything's so murky today.

[apropos@fsebugoutzone.org]

@mcc @tomjennings whois on it:
Expiry Date: 2026-11-20T15:22:37Z
created in 2014, and probably not abandoned because it was just updated a few months ago. Probably just forgot to renew - a chore.
whois has an XWiki SAS contact with an email that you can try.

[dirk@nona.social]

@tomjennings https://cryptpad.org/about/ „CryptPad has been supported since 2016 by French and European research grants such as BPI France, NLNet Foundation, NGI Trust, Mozilla Open Source Support. We believe that public money should fund public code, so the service is fully open source.“

[usul@piaille.fr]

@tomjennings poke @ldubost runs the show there

[tomjennings@tldr.nettime.org]

@usul @ldubost

Thanks! I have no focused questions, and in fact as far as I'm concerned, your fedi posts are all I could ask for.

A local neighborhood group used cryptpad.fr, I had never heard of it, did quick web search, found a dubious "scam detector" website giving it dubious ratings; but the site itself wasn't confidence-inspiring.

What a world.

[patrick@retro.social]

@tomjennings It's relatively simple to abuse it, given how they don't see the data you store with them by virtue of end-to-end-encryption, while it's simple to start storing data (just start a doc). As such, it makes sense to flag it as scam for use cases that aren't "you work on your own stuff".

[lanodan@queer.hacktivis.me]

@tomjennings I guess scam detector gives it a low rating as it's effectively the same kind of thing as pastebin/etherpad/… except even worse as the hosters somewhat* can't decrypt the contents, similar to like ZeroBin/PrivateBin.

*WebApp so admins control the software and it's encryption

[liaizon@social.wake.st]

@tomjennings knowing all the fine work @CryptPad has been doing makes this scam detector sound like it might be a scam
Here's a little intro to their history https://ngi.eu/blog/2020/05/26/whos-ngi-aaron-macsween-presents-cryptpad-the-encrypted-collaboration-suite/

[cryptpad@social.xwiki.com]

@tomjennings Thank you @liaizon for vouching for us 🙏 we would be interested in learning more about this "scam detector" so we can try to set the record straight. Our service has been wrongly flagged in the past for example: https://blog.cryptpad.org/2025/05/07/status-2025-04/

[tomjennings@tldr.nettime.org]

@CryptPad @liaizon

This is rhe site:

https://www.scam-detector.com/

[dec23k@mastodon.ie]

@tomjennings @CryptPad @liaizon
I would have expected the flagship instance of CryptPad to rank higher :-)

The same scam detector website gives a much higher rank to https://cryptpad.cz/ (which is hosted by @nolog on their own hardware). https://nolog.cz/en/about/