Proposal + discussion around contribution about rxdb HOT 5 CLOSED

Hi @elribonazo

1. There is already the premium web-crypto plugin. This has the best tradoffs because it relies on the browser crypto methods and you do not have to trust anybody else.

2. Yes that was considered many times. But this requires a huge amount of work and for me I do not think it adds that much values to justify the work. If you want to do that I am happy to accept a PR. I already own the @rxdb npm-handle so we can publish packages at this.

3. Atm RxDB is self sustainable until eternity. I do not want to risk that by changing the business model. I considered building a cloud offering but this is planned for the intermediate-term not short-term.

I see no value on rewriting everything in rust. Instead we could collaborate on creating an RxStorage implementation in rust that can run in webassembly and maybe is much faster. But my current performance measurements show that the main-thread to webassembly bridge cost so much latency and overhead that having everything build in javascript is much faster. For example the sqlite wasm storage is not that much faster compared to indexeddb even when sqlite is used in-memory.

from rxdb.

Hello sir, nice to read from you again! Thanks for the quick reply.

I do have a custom encryption plugin but what is affecting me as a user is that my project has very strong security requirements, and despite we are able to justify that the vulnerable dependencies are not used in the project it does not look right, also our security audits will spot this and reject our release.

I agree that it would require a huge amount of work but u know it would improve so badly? Someone that just wants to use a storage can just install the test-suite package, run its tests and then be ready to release. Same for other packages, why do i need to use firebase with the vulnerable dependency if i'm not using the replicate plugin for firebase, see what I mean?

I think most of my issues would blow away if we could achieve workspaces for RXDB and i'm happy to try collaborating in that sense! thanks for your support man. Won't make shortcuts in terms of testing, etc... no matter how long it takes but yeah i really would love to see we can make this.
Going full rust would be re-writing the full core, that is what i ment... I care less about the storages, people could use wasm or not wasm as now. Anyways,let's see if we can try first approach.

For now, we are patching the package :| taking out crypto-js and the firebase replicate plugin, all good i guess for now, but its not very clean hehe :)

Have a great week!

from rxdb.

I think most of my issues would blow away if we could achieve workspaces for RXDB

PR is welcomed.

from rxdb.

This issue has been automatically marked as stale because it has not had recent activity. It will be closed soon. Please update it or it may be closed to keep our repository organized. The best way is to add some more information or make a pull request with a test case. Also you might get help in fixing it at the RxDB Community Chat If you know you will continue working on this, just write any message to the issue (like "ping") to remove the stale tag.

from rxdb.

Issues are autoclosed after some time. If you still have a problem, make a PR with a test case or to prove that you have tried to fix the problem.

from rxdb.