xoron

https://github.com/positive-intentions

GitHub:

#Privacy #OnlinePrivacy #DataPrivacy #Infosec #CyberSecurity #OpSec #DigitalRights #AntiSurveillance #DataOwnership #E2EE #P2P #PeerToPeer #WebRTC #LocalFirst #LocalOnly #NoCloud #NoRegistration #PWA #SignalProtocol #PostQuantum #Cryptography #SecureMessaging #PrivateChat #EncryptedChat #Decentralized #OpenSource #SelfHosted #BetaTesting #FeedbackWelcome #TechDemo #ProofOfConcept #BuildInPublic #IndieDev #DevCommunity

· 1mo ago

Decentralized browser-based P2P E2EE messaging.

The key detail that sets this apart from other messaging apps is the browser-based client-side cryptography philosophy.

No need to install anything. Your ID is crypto-random and so the app doesnt need to rely on any central registration system like phone numbers. Your ID is unguessable and to connect to someone, you have to explicitly share it.

WebRTC has other nuances like being to route through a shared network for secure/faster transfer.

I hope this project has reached a level i can share the following details. I've made a genuine effort towards documentation and transparancy. I dont think it'll ever be enough and so im still concerned it isnt ready to share. While im using AI throughout. This is not a vibecoded project. There is attention throughout for unit tests and formal-verification. With your feedback, id like to make improvements for clarity throughout.

This version of the app demonstrates a fairly unique approach using a browser-based, local-only and webrtc approach. I know it's impossible for any system to be the "world's most secure", but that isnt a reason to not try. By rigorously implementing an exhaustive list of security features and practices, the aim is to get as close as possible.

Enkrypted.Chat

This is intended to demonstrate client-side managed secure cryptography.

Introducing Enkrypted Chat
Whitepaper (work-in-progress)
Protocol Spec (work-in-progress)
Roadmap

I know ive tried to compress a lot of my journey into one post. The project above is going to be tricky to understand. Feel free to reach out for clarity on any of the details.

IMPORTANT: While this is aiming to provide a secure experience, It is not audited or reviewed. Shared for testing, feedback and demo purposes only. Please use responsibly.

#WebDev #JavaScript #PWA #LocalFirst #OfficeSuite #FileSystemAPI #Tech #Programming #SoftwareEngineering #WebApps #Privacy #SelfHosted #NextCloud #P2P #WebDevelopment #IndieDev #Coding #DevCommunity #TechNews #AppDevelopment #FreeSoftware #BrowserApp

· 3mo ago

Browser-Based Euro Office Clone

This is an experimental, local-first project designed to demonstrate client-side managed functionality without requiring any setup. By leveraging the FileSystem API, it offers a unique approach to storing files directly on your device from your browser.

Current Features:

PWA (Progressive Web App)
Local-first storage
Word processor
Spreadsheet tool
PDF capability

Coming Soon:

Support for more file types
Storage synchronization
Collaborative editing
Encryption at rest
P2P file-transfer

Long-Term Goals (Clones of):

NextCloud
WhatsApp
Instagram
WeTransfer

Note: This project is experimental, far from finished, and presented strictly for testing, feedback, and demo purposes (USE RESPONSIBLY!).

Check out the demo version and let me know your thoughts!

Demo: https://enkrypted.chat/?tab=file

· 2mo ago

I'd like to share the latest version of my project.

It's a a decentralised P2P messaging app. The aim is of course privacy and security.

It demonstrates a fairly unique approach by using browser-based local-only storage with webrtc.

https://www.reddit.com/r/positive_intentions/comments/1tq1u62/introducing_enkrypted_chat

---

· 3mo ago

https://www.reddit.com/r/positive_intentions

This is intended to introduce a unique approach in client-side managed secure cryptography. We can avoid registration of any sort.

Features:

PWA
P2P
End to end encryption
Signal protocol
Post-Quantum cryptography
Multimedia
File transfer
Video calls
Local-first
No registration
No installation
No database
TURN server

#Privacy #OpenSource #P2P #WebRTC #Decentralization #DigitalSovereignty #CyberSecurity #FOSS #SelfHosted #NoCloud #AntiCorp #Encryption #WebDev #TechLiberty #PrivateMessaging #Networking #DataPrivacy #InternetFreedom #LocalFirst #SoftwareEngineering #WebApps #ZeroKnowledge #PrivacyTech #IndieDev #NoSignup #NoInstall #DecentralizedWeb #SecureMessaging #BrowserApp #TechEthics #P2P #WebRTC #PeerJS #ZeroData #EphemeralData #Encryption #E2EE #BrowserToBrowser #NoInstall #Privacy #Security #Decentralized #Messaging #VideoCall #NoTracking #PrivateMessaging #Prototype #Demo #WorkInProgress #CloseSource #OpenSource #WebDev #GitHub #TechDevelopment #WhatsApp #ChatApp #InstantMessaging #PWA

· 3mo ago

#EnkryptedChat #LocalFirst #SelfHosted #Nextcloud #DeGoogle #PrivacyMatter #DataSovereignty #OpenSource #FOSS #IndieWeb #NoSignup #ZeroSetup #WebDev #TechDemocracy #PrivacyTools #Decentralized #CloudAlternative #WebApp #SoftwareDevelopment #TechFreedom #SelfHosting #LocalData #DataPrivacy #NoAccount #TechFeedback #AppDemo

This is intended to introduce a new paradigm in client-side managed secure cryptography. We can avoid registration of any sort. A fairly unique offering in the cybersecurity space.

No need for things like phone numbers or registering to any app stores. There are no databases to be hacked. Allowing users to send E2EE messages and files; no cloud, no trace.

Features:

PWA
P2P
End to end encryption
Signal protocol
Post-Quantum cryptography
Multimedia
File transfer
Video calls
Local-first
No registration
No installation
No database
TURN server

The live demo is up and running now. We want to build this around what you actually need, so please give the demo a spin and share your feedback, feature requests, or general thoughts in the comments.

Live demo: https://Enkrypted.Chat

· 3mo ago

WhatsApp Clone, but Decentralized with P2P Messaging

App: https://Enkrypted.Chat

"Secure and private" is the general goal.

This is a technical/concept demo of a fairly unique approach using a browser-based, local-first and webrtc.

This is intended to introduce a new paradigm in client-side managed secure cryptography. We can avoid registration of any sort.

Features:

* P2P
* End to end encryption
* Signal protocol
* Post-Quantum cryptography
* File transfer
* Local-first
* No registration
* No installation
* No database
* TURN server

Feel free to reach out for clarity instead of diving into the docs/code.

IMPORTANT: While this is aiming to provide a secure experience, it isnt audited or reviewed. **Shared for testing, feedback and demo purposes only.** Please use responsibly.

https://positive-intentions.com

· 5mo ago

Decentralized WhatsApp Clone - No Setup or Signup

This is intended to introduce a new paradigm in client-side managed secure cryptography. We can avoid registration of any sort. A fairly unique offering for a messaging app.

No need for things like phone numbers or registering to any app stores. There are no databases to be hacked Allowing users to send E2EE messages; no cloud, no trace.

#PrivacyTech #Privacy #CyberSecurity #Infosec #WebDev #JavaScript #Decentralized #EncryptionProtocol #QuantumResistant #Tech #FOSS #SoftwareEngineering #DataPrivacy #SecureChat #NoLog #P2PChat #WebRTCProtocol #Coding #DevCommunity #DigitalPrivacy #InternetFreedom #SecureMessaging #WebTech #AppDevelopment #CryptographyResearch #PrivateMessaging #WebPlatform #ZeroTrust #Innovation

· 5mo ago

Is this a #secure #MessagingApp? Maybe not yet, but it’s time to think about #DigitalPrivacy.

Imagine a #Messaging platform that’s as #secure as #Signal but requires #NoRegistration and #NoInstallation. By leveraging #WebRTC for direct #BrowserToBrowser communication, this #OpenSource project eliminates the #Middleman entirely. Simply share a unique #URL to establish an #Encrypted #PrivateChannel. It is a #Lightweight, #Disposable method to bypass #DataHarvesting and reclaim #DigitalSovereignty.

This project introduces a new #Paradigm in #ClientSide managed #Encryption. Send #Secure messages with #NoSetup, #NoCloud, and #NoTrace.

Experience the #Features:
* #PWA (#ProgressiveWebApp) for instant access
* #P2P (#PeerToPeer) connectivity
* #EndToEndEncryption (#E2EE)
* #SignalProtocol & #PostQuantum #Cryptography
* #Multimedia, #FileTransfer, & #VideoCalls
* #NoDatabase & #Stateless architecture
* #TURN server support for reliable connections

While not yet a direct replacement for #Simplex or #WhatsApp, this introduces a unique approach to #SecureCommunication.

Try the #LiveDemo now:
https://p2p.positive-intentions.com/iframe.html?globals=&id=demo-p2p-messaging--p-2-p-messaging&viewMode=story

Explore the #Technical roadmap:
https://positive-intentions.com/docs/technical/p2p-messaging-technical-breakdown

Read the full #Documentation:
https://positive-intentions.com/docs/technical

https://positive-intentions.com

· 7mo ago

WhatsApp Clone... But Decentralized and P2P Encrypted Without Install or Signup.

Features include:
* P2P
* End to end encryption
* forward secrecy
* Multimedia
* Open source
* No registration
* No installation
* Encrypted storage
* TURN server

The project is far from finished and presented for testing, feedback and demo purposes (USE RESPONSIBLY!).

#WebDev #WebDevelopment #Frontend #FrontendDev #JavaScript #JS #TypeScript #TS #HTML #HTML5 #CSS #SoftwareEngineering #SoftwareEngineer #Coding #Programming #WebDesign #OpenSourceProject #IndieDev #SideProject #Tech #Technology #DevCommunity #Fediverse #FediverseDevs #WebStandards #CustomElements #ShadowDOM #VanillaJS #NoTranspiler #NoBuild #BuildStep #EsModules #ComponentDriven #UIUX #DesignSystems #TechExperiment #LearningInPublic #Developer #ComputerScience #OSS #Github #React #WebComponents #Lit #Vue #ReactJS #JSX #Storybook #TechArticle #TechBlog #TechWriting #WebDevArticles

· 3mo ago

React-like syntax with WebComponents.

After spending some time with Lit, I really appreciated its lightweight footprint but wasn't a fan of the class-based components. While Vue offers a great approach, I still prefer the intuitive nature of React's syntax for debugging and deterministic rendering. This led me to a challenge: could I build a UI framework using WebComponents that completely eliminates the need for transpilation?

I have written a breakdown of the concept, the architecture, and where I want to take it. I highly invite you to take a look, check out the code, and explore the live demo.

* How it works: https://positive-intentions.com/docs/projects/dim/dim-jsx-webcomponents
* Checkout the code: https://github.com/positive-intentions/dim
* Storybook demo: https://dim.positive-intentions.com

Please note, while the project is open-source, this is a personal exploration rather than an attempt to launch "yet another framework." It is not production-ready and is built for my own upcoming project migrations, but I am sharing it in hopes that the methodology is educational or interesting to the community.

I would love to hear your thoughts on this approach. Feel free to reach out if you have any questions or want to discuss the implementation details.

Demo: https://cryptography.positive-intentions.com/?path=/story/cascading-cipher-ml-kem-demo--mlkem-standalone

· 6mo ago

TLDR: I’ve implemented #QuantumResistant #Encryption into my #P2P messaging #webapp using #MLKEM (#Kyber) to protect against future #QuantumComputing threats. Read my latest #Blog post to see how I’m securing #DataPrivacy today.

My journey into #PostQuantum #Security
I’ve been working hard on my latest project update, focusing on how we can protect our #Privacy from the looming threat of "harvest now, decrypt later" attacks. I just finished writing a technical deep dive into how I’ve implemented #QuantumResistant #Cryptography into my #P2P messaging platform.

The core of my approach involves using #MLKEM (formerly #Kyber) to ensure long-term #DataSecurity. I’m particularly proud of the #CascadingEncryption layer I’ve built; by combining #NIST standards with the #SignalProtocol, I'm ensuring that your #Communications remain #Secure even if a single algorithm is compromised in the future.

If you are into #OpenSource, #InfoSec, or #Decentralized #Tech, I’d love for you to read about my implementation and the challenges of bringing #QuantumResistance to the #Browser using #JavaScript.

Read my write-up here:
https://positive-intentions.com/blog/quantum-resistant-encryption

Crash course in ML-KEM: https://positive-intentions.com/blog/ml-kem-beginner-tutorial

I'm excited to hear what the #Developer and #CyberSecurity community thinks about this #PrivacyFirst milestone!

https://programming.dev/c/SecureComs@lemmy.ml

· 8mo ago

WhatsApp Clone... But Decentralized and P2P Encrypted (No Install or Signup)

The following is a technical breakdown of progress and how it works.

#P2P #WebRTC #PeerJS #ZeroData #EphemeralData #Encryption #E2EE #BrowserToBrowser #NoInstall #Privacy #Security #Decentralized #Messaging #VideoCall #NoTracking #PrivateMessaging #Prototype #Demo #WorkInProgress #CloseSource #OpenSource #WebDev #GitHub #TechDevelopment #WhatsApp #ChatApp #InstantMessaging

· 9mo ago

#Encrypted #P2P #Messaging App

Want to send #E2E encrypted messages and #video #calls with no downloads, no sign-ups and no tracking?

This prototype uses #PeerJS to establish a secure browser-to-browser connection. Using browser-only storage—true #zerodata #privacy!

Https://enkrypted.chat

The aim is to have an experience as close to Whatsapp as reasonably possible so that the experience is intuitive.

Some features include:

P2P

End to end encryption

Browser-based

No installation/registration

Messaging

Text Messaging

Multimedia Messaging

File Transfer

Video Calls

Data Ownership

passkeys-based encryption

Local-Only storage

Encrypted at rest

NOTE: This is still a work-in-progress and a close-source project. To view the open source MVP see here. It has NOT been audited or reviewed. For testing purposes only, not a replacement for your current messaging app.

Reddit: https://www.reddit.com/r/positive//_intentions

Mastodon: @xoron@infosec.exchange

Docs: https://positive-intentions.com

https://positive-intentions.com

· 7mo ago

i redid my landing page because it was a while since i took a look at it and it was starting to show.

i think i should update some of the screenshot for some hand-drawn illustrations like seen in other places. towards the end, i was making a lot of unnessesary little tweaks so i decided to commit to what you see. images and styling can be updated whenever.

my app is similar to the #Signal messaging app and so i tried to align my website to theirs (https://signal.org).

let me know if i can improve it in some way.

#WebDevelopment #Frontend #BuildTheWeb #NoFramework #JS #JSX #WebStandards #Coding #ResearchAndDevelopment #VanillaJS #SoftwareEngineering #TechBlog #WebDevCommunity

· 6mo ago

React-Like JSX Syntax for Webcomponents

TLDR: I’ve been #experimenting with react-like jsx-syntax with webcomponents to see if I could theoretically replace #React in one of my larger #software projects. It is not ready for production use, but rather a #Research exploration into #CustomElements and #ModernJS performance.

The goal was to build #FunctionalWebComponents that handle #StateManagement and #DOM updates without the overhead of a massive #JavaScript framework. By leveraging #StandardWebAPIs and #Proxy objects, I’ve managed to create a #Reactive programming model that feels familiar but stays closer to the #Platform.

Check out the full #TechnicalTutorial and #DeepDive here: https://positive-intentions.com/docs/research/Tutorials/dim/dim-functional-webcomponents

(Disclosure: this project may be getting deprecated. Sharing this because it might still be interesting or educational.)