#e2ee

Fedilab Apps @apps@toot.fedilab.app · 3d ago

Boosted by

#FediHood is now available! Talk with people near you. A local chat on the #Fediverse where you share only your city, never your exact location. You adjust your timeline with distance and topic filters. It's in early beta and web only for now. It connects to the whole Fediverse, and you can send #E2EE DMs between FediHood and Holos users. The source code will be published soon. Don't hesitate to share! Instance: https://fedihood.social

6

0

10

0

Fedilab Apps @apps@toot.fedilab.app · 5d ago

#FediHood and #HolosSocial, two separate #Fediverse projects (that I maintain), can now send each other #E2EE DMs, fully over #ActivityPub.

38

1

28

0

xoron

@xoron@infosec.exchange · Jul 29, 2026

Decentralized browser-based P2P E2EE messaging.

The key detail that sets this apart from other messaging apps is the browser-based client-side cryptography philosophy.

No need to install anything. Your ID is crypto-random and so the app doesnt need to rely on any central registration system like phone numbers. Your ID is unguessable and to connect to someone, you have to explicitly share it.

WebRTC has other nuances like being to route through a shared network for secure/faster transfer.

I hope this project has reached a level i can share the following details. I've made a genuine effort towards documentation and transparancy. I dont think it'll ever be enough and so im still concerned it isnt ready to share. While im using AI throughout. This is not a vibecoded project. There is attention throughout for unit tests and formal-verification. With your feedback, id like to make improvements for clarity throughout.

This version of the app demonstrates a fairly unique approach using a browser-based, local-only and webrtc approach. I know it's impossible for any system to be the "world's most secure", but that isnt a reason to not try. By rigorously implementing an exhaustive list of security features and practices, the aim is to get as close as possible.

Enkrypted.Chat

This is intended to demonstrate client-side managed secure cryptography.

I know ive tried to compress a lot of my journey into one post. The project above is going to be tricky to understand. Feel free to reach out for clarity on any of the details.

IMPORTANT: While this is aiming to provide a secure experience, It is not audited or reviewed. Shared for testing, feedback and demo purposes only. Please use responsibly.

#Privacy #OnlinePrivacy #DataPrivacy #Infosec #CyberSecurity #OpSec #DigitalRights #AntiSurveillance #DataOwnership #E2EE #P2P #PeerToPeer #WebRTC #LocalFirst #LocalOnly #NoCloud #NoRegistration #PWA #SignalProtocol #PostQuantum #Cryptography #SecureMessaging #PrivateChat #EncryptedChat #Decentralized #OpenSource #SelfHosted #BetaTesting #FeedbackWelcome #TechDemo #ProofOfConcept #BuildInPublic #IndieDev #DevCommunity

4

0

4

0

Daniel Supernault @dansup@mastodon.social · Jul 29, 2026

I look forward to working with @benpate@mastodon.social, @Bonfire and @evan@cosocial.ca from the SWF on E2EE Direct Messages in Loops, Pixelfed and Sup! They’re doing some amazing work, and it makes a lot of sense to collaborate and widen compatibility across our platforms! #ActivityPub #E2EE

12

2

9

0

silverpill @silverpill@mitra.social · Jul 27, 2026

Boosted by

fedicat @fedicat@pc.cafe

FEP-0806: Simple client-side encryption https://codeberg.org/silverpill/feps/src/branch/main/0806/fep-0806.md The FEP now includes the recommended algorithm parameters. I consider it finished but I don't plan to continue working on my implementation or publishing to the main FEP repository. It would be better to focus on group messaging with forward secrecy (MLS or similar). #fep_0806 #e2ee

0

2

0

JTI @jti42@infosec.exchange · Jul 27, 2026

Replying to @brayd@social.brayd.blog

@brayd@social.brayd.blog there is always #matrix but from my experience it is way heavier than xmpp. OMEMO, the XMPP E2E thing, is/was based on the Signal (Axolotl) crypto protocol and probably doesn't work worse than what Matrix gives you in that regard. Both have ample selection on servers and clients these days. Give both a try. #xmpp #omemo #axolotl #e2ee #e2e #matrix #selfhosing #decentralized #instantmessaging

4

0

adb @adbenitez@mastodon.de · Jul 26, 2026

join the one and only decentralized end-to-end encrypted anonymous lefty politics and climate activism memes channel in the world! Meme Logistics - Your go-to fun lefty memes supply chain https://i.delta.chat/#818297831FAA0AB9917497FA5B145F41993374F1&v=3&x=xusVctOPSGOA6oFq4esfR68V&j=YspskxfxoImavuPj3qFTuX7H&s=d1sWSLq-ceUR9x5nJpWX7dLa&a=207nv967sz55do78f1xj%40chat.in%2Dthe.eu&n=Meme+Logistics&b=Meme+Logistics #memes #politics #fun #meme #channel #decentralization #encryption #e2ee #ArcaneChat #DeltaChat

18

0

11

0

twonly.eu @twonly@mastodon.social · Jul 21, 2026

The upcoming update brings two major features preventing you from losing access to your memories 🎉

Passwordless Backups: Never again lose access to your twonly account if you have forgotten your password. Just select friends you trust and choose a second factor. Read our blog post for more details [1].
Encrypted Cloud Backups: More Details and additional features follow soon!

https://twonly.eu/en/blog/2026-passwordless-backup.html

#e2ee #privacy #snapchat #did

0

Self-Hosted Feed @selfhosted_bot@fd.mrmave.work · Jul 20, 2026

🔐 giovantenne/lastsignal Delivers encrypted messages to contacts if you stop responding to periodic email check-ins, with configurable timing and end-to-end encryption ⭐ Stars: 686 📅 Last Update: Jul 18, 2026 https://github.com/giovantenne/lastsignal #selfhosted #homelab #selfhost #selfhosting #opensource #deadmanswitch #e2ee

0

🐦‍🔥nemo™🐦‍⬛ 🇺🇦🍉 @nemo@mas.to · Jul 20, 2026

🔒 EFF reports Apple is the only major wearable vendor with end-to-end encryption for health data in its Health app. Others mainly encrypt in transit/at rest, leaving data accessible to providers. Transparency reports are uncommon. 🍎🩺 Read: https://cyberinsider.com/eff-apple-the-only-major-wearable-vendor-offering-e2ee-for-health-data/ #Privacy #E2EE #Wearables

0

muddle 🥣 @muddle@infosec.exchange · Jul 18, 2026

Replying to @muddle@infosec.exchange

It imagines a world where #E2EE is made illegal or at least a cause for suspicion. It turns the tables by saying, this thing that I am saying... not only am I not ashamed of saying it, but I am using my identity to validate that it is me saying it. A MAC-based identity/signing system is at the lower end of possibilities. If knowing that the signature matches a known identity gives assurances that this known identity is the source of the message, then why stop with a MAC? If I were to sign each packet with a string of the form "this packet is certified to come from the pen of and comes as part of a longer AONT message which is signed using the publicly-available PGP signature whose checksum is " #Muddle is also a political statement. It's a not-encryption scheme that's just too stupid to beat.

0

Fedilab Apps @apps@toot.fedilab.app · Jul 17, 2026

RE: https://mastodon.social/@HolosSocial/116937094959319831 While most of you know my main account for #Fedilab, months ago I wanted to work on something new. Being able to publish this code in production is an important step for me. Yes, it is possible to run an #ActivityPub server on your phone, with #E2EE DMs and a portable identity. And you are no longer tied to a single model like text, media or video. No need for separate apps: one account does it all, and you switch in one tap. Only your device owns the data, and the rules are on your side.

5

0

5

0

Matt Vestengen-Cox @matt@oslo.town · Jul 17, 2026

The #DeltaChat server that I was using seems to have stopped working for receiving messages, which sucks 😞 but such is the nature of decentralisation 🤷 It's really easy just to start a new account on a new server - so that's not really a problem - but I'm lucky that I only have one contact that message on the app because "re-adding" people isn't super straight forward. 🤔 #technology #apps #messagingApps #internet #chat #e2ee

1

2

0

Fedizen ⁂ Fediverse News @fedizen@mastodon.social · Jul 16, 2026

The #W3C is working on end-to-end encryption #E2EE for #ActivityPub, with three main goals: enabling #encryptedmessages with attachments, ensuring #correctencryption, and verifying #usercontrol of signing keys. The Fundamental Goal is being addressed by the SWICG’s ActivityPub E2EE project team, while the Security Goal requires client software to authenticate KeyPackages. https://soatok.blog/2026/07/15/the-long-tail-of-work-left-until-activitypub-has-e2ee/?Fedizen.EU #Fedizen #Fediverse #ActivityPub #News

10

0

9

0

Tobias @tsmreu@infosec.exchange · Jun 24, 2026

For the cryptography fans among you, here’s a little challenge with a 50€ prize :) For @twonly@mastodon.social, I’m planning a backup method where users no longer have to remember a password. The idea: Instead of trusting the server, just trust your friends. You can find the exact details here: https://tsmr.eu/blog/2026-passwordless-recovery #cryptography #bugbounty #e2ee

1

0

1

Fedilab Apps @apps@toot.fedilab.app · Jul 15, 2026

A hypothetical about chat control and #HolosSocial Say a law one day required client-side scanning. The relay only ever sees encrypted data, so a scan would catch nothing. To read content, it must run in the client, before encryption. A closed client could add it silently in an update. An open one cannot: the code is public, anyone can recompile without it. Would an open source #E2EE messenger on the #Fediverse like Holos be breaking the law if it did nothing? I am not sure. Your opinion?

5

0

6

0

Network Pro Strategies @networkpro@infosec.exchange · Jul 09, 2026

🚨 The European Parliament is one vote away from mandating the mass scanning of private messages. On July 7, MEPs fast-tracked Chat Control 1.0. The final, binding vote follows on Thursday, July 9. ⌛ We need 361 MEPs to block this measure and protect end-to-end encryption. Contact your representatives immediately to defend our digital privacy. Learn more at: https://fightchatcontrol.eu/ #ChatControl #DigitalRights #E2EE #Privacy #MassScanning #EuropeanParliament

0

khaleesi @khaleesicodes@eupolicy.social · Jul 09, 2026

Gerade eben wurde erneut über die #Chatkontrolle 1.0 abgestimmt. Diese wurde im Frühjahr bereits abgelehnt. Der Vorschlag wurde so eben mit 2 Änderungsanträgen angenommen. Heisst freiwilliges anlassloses Scannen von Kommunikation, nach bekannten und unbekannten Material, ist wieder zu lässig. #E2EE verschlüsselte Kommunikation ist ausgenommen. Auch wenn verschlüsselte Kommunikation Geschütz ist, ist das ein herber Rückschlag im Kampf gegen anlasslose Massenüberwachung.

153

24

196

1

デイヴ @deivudesu@mastodon.social · Jul 08, 2026

Replying to @deivudesu@mastodon.social

Crucially, everything about this is fully e2e encrypted and decentralised: your account is a crypto key, and you are mainly responsible for keeping the list of people you are "friends" with. 3rd party servers act as dumb "mailbox" relays (to make up for the fact that most people's devices aren't always online or can't easily work as p2p), but only store fully encrypted payloads, and can theoretically be replaced by any other system. 2/ 🧵 #e2ee #crypto #security #decentralized #p2p

1

5

0

ArcaneChat @arcanechat@fosstodon.org · Jun 30, 2026

🎉 New channel for #ArcaneChat, #DeltaChat and other #chatmail clients: Greenpeace International: Greenpeace exists because this fragile Earth deserves a voice. It needs solutions. It needs change. It needs action. With automated posts from @greenpeace@mastodon.social here is the invite link 👇️️ https://i.delta.chat/#EB87F92DC57303205E7F3ACB6DAA06D8FE761414&v=3&x=OVB2LD5FvbhhrYHzkdBQU50p&j=uxWwBrg1nDUH08i3wgVuw6US&s=hpmcA1sjEKnnc2s71Y7_Bsf4&a=6j2tb0xyz%40arcanechat.me&n=ChannelsBot&b=Greenpeace+International #politics #activism #ClimateChange #decentralization #encryption #e2ee #privacy #anonymous #security #europe #european

5

0

5

0

About This Hashtag

#e2ee

Related