Should Sensitive Systems Be Open Source ?

The other day, I was talking to a friend who's studying computer engineering. We were discussing my open-source project, a small online tool that helps people encrypt their data. During our conversation, my friend dropped a bombshell: "Your app shouldn't be open source." He argued that because my web app's source code is public, anyone can examine it, find weak points, and potentially break into the encryption system.

This led to a lively debate. I'm a big fan of open-source …

app code computer conversation data discuss encrypt engineering open source opensource people project security sensitive softwareengineering source code systems talking tool web web app