one benefit of online is privacy. I've talked to many people that really don't like having a physical journal laying around with personal information that a partner might read. But yeah, I get there are workaround to that problem and not everyone has this kind of privacy issue
You are right, I get what you are saying. But I guess I'm speaking more from a user perspective. Some people have told me they can't write down private things in a physical journal; as someone they are living with can easily pick it up and read it. In theory, a digital copy can be secured with more confidence than a physical copy ... for example by encrypting things with a key that you're confident only you have access to. I think I should have said that one benefit of "digital" is the potential for increased security ... online is clearly not the case.
"Privacy" and "online" don't go well together, though. Talking about "zero-knowledge" doesn't really address the issue, because there is no way of knowing if the author is being honest, or if they've implemented it correctly.
Maybe zero-knowledge should be open sourced, built from source by users as a desktop app (so they can lock to a version), and each version should be stamped (hash of specific version signed) by trusted 3rd party penetration testing agency -- it does limit the reach of the product though
It's a tough problem. An application like this is all about convenience. Having to vet the source and build it yourself brings a lot of inconvenience.
It's probably just an issue of the right target market. People like me aren't it, but people who are less concerned about such things may very well be. A zero-knowledge implementation is still a great idea to protect them, even if they don't really appreciate the protection they're getting.
By the way, I realize my comments have been critical, so let me say the other side: good work! I wish you all the success in the world. Building and releasing something is a major accomplishment, and anything you make won't be right for everyone. That's not a fault with your product. That's just the fact that different people have different needs.
Thanks a lot for the encouragement; but also I really appreciate the honest feedback, it wouldn't be hacker news if people stopped being honest, it's why we all love the conversations here.
I agree the primary appeal (and thus market) of this app is not technical, but of course it's still important that the technical aspects are vetted and secure.
Just do it offline, there's your zero-knowledge.