[renrutal]

> Airy Enterprise

> * E2E Encryption & Storage

This worries me, I believe it's unethical and irresponsible to pay-wall privacy features.

We live in a world where companies and governments are actively spying and harming those under them.

[shoellinger]

Hi renrutal, Steffen from Airy here. Thanks for your remark and I couldn't agree more with you which is why we don't pay-wall privacy features. Actually, nothing stops you from turning on encryption also in the open source version of Airy as Pascal pointed out above.

The topic you mentioned above comes from our pricing page for the Airy Enterprise Edition and is about an additional (!) and fully optional conversational data store for archiving conversations and to provide for conversational analytics use cases. We currently only offer this additional streaming option for enterprise customers with large amounts of conversational data by leveraging data lakes on economic cloud storage solutions like AWS S3. We strongly recommend to activate server-side encryption for this storage option.

Here's a blog post we wrote about the relevant topic of utilizing data lakes as a long-term solution to store conversational data: https://blog.airy.co/introducing-data-lakes-for-conversation...

If you have further suggestions how to improve privacy features in the interest of all users, we are of course happy to discuss them.

[pascal-holy]

Hi renrutal, Pascal from Airy here. Encryption is a very important topic for us. Since in all our versions all of the data resides in Apache Kafka and is only exposed via Kafka Streams Apps we are able to take advantage of Kafkas SSL encryption. For encryption-at-rest we use our cloud providers disk encryption. We also support Open ID Connect as an identity layer so we can focus on improving our platform and be assured that our authentication is always up to date and secure. You raise a good point though and we will continue innovating to make encryption accessible to everyone.

[kixiQu]

Is that E2E, though? I'm not Kafka-knowledgeable, but that sounds like it's encrypted as it gets to your servers and encrypted as it rests on them -- not encrypted all the way between people sending messages.

[donpark]

I'd agree in general for consumer use-cases but not for business use-cases. With an open source business tool that may be used in non-business context, charging for features required for business use makes sense.

Even among consumer use-cases, lack of privacy may be a feature. In spatial chat, for example, being in able to overhear conversation within 'earshot' is a feature. Selling private space in that context makes sense and similar to selling improved voice quality, at least to me, and there are stark operational cost boundaries in the involved tech that can complicates the picture.

[cvwright]

> We live in a world where companies and governments are actively spying and harming those under them.

Therefore this random company owes you security features for free?

Users wanting free shit is the reason why companies like Google and Facebook are doing all this spying in the first place. Those huge warehouse-size datacenters don't pay for themselves.

[junon]

> Therefore this random company owes you security features for free?

Yes.