home.social

#securemessaging — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #securemessaging, aggregated by home.social.

fetched live
  1. Decentralized browser-based P2P E2EE messaging.

    The key detail that sets this apart from other messaging apps is the browser-based client-side cryptography philosophy.

    No need to install anything. Your ID is crypto-random and so the app doesnt need to rely on any central registration system like phone numbers. Your ID is unguessable and to connect to someone, you have to explicitly share it.

    WebRTC has other nuances like being to route through a shared network for secure/faster transfer.

    I hope this project has reached a level i can share the following details. I've made a genuine effort towards documentation and transparancy. I dont think it'll ever be enough and so im still concerned it isnt ready to share. While im using AI throughout. This is not a vibecoded project. There is attention throughout for unit tests and formal-verification. With your feedback, id like to make improvements for clarity throughout.

    This version of the app demonstrates a fairly unique approach using a browser-based, local-only and webrtc approach. I know it's impossible for any system to be the "world's most secure", but that isnt a reason to not try. By rigorously implementing an exhaustive list of security features and practices, the aim is to get as close as possible.

    * [Enkrypted.Chat](enkrypted.chat/)

    This is intended to demonstrate client-side managed secure cryptography.

    * [Introducing Enkrypted Chat](positive-intentions.com/blog/i)
    * [Whitepaper (work-in-progress)](positive-intentions.com/docs/t)
    * [Protocol Spec (work-in-progress)](positive-intentions.com/docs/t)
    * [Roadmap](positive-intentions.com/docs/t)

    I know ive tried to compress a lot of my journey into one post. The project above is going to be tricky to understand. Feel free to reach out for clarity on any of the details.

    IMPORTANT: While this is aiming to provide a secure experience, It is [not audited or reviewed](reddit.com/r/CyberSecurityAdvi). **Shared for testing, feedback and demo purposes only.** Please use responsibly.

    #Privacy #OnlinePrivacy #DataPrivacy #Infosec #CyberSecurity #OpSec #DigitalRights #AntiSurveillance #DataOwnership #E2EE #P2P #PeerToPeer #WebRTC #LocalFirst #LocalOnly #NoCloud #NoRegistration #PWA #SignalProtocol #PostQuantum #Cryptography #SecureMessaging #PrivateChat #EncryptedChat #Decentralized #OpenSource #SelfHosted #BetaTesting #FeedbackWelcome #TechDemo #ProofOfConcept #BuildInPublic #IndieDev #DevCommunity

  2. SimpleX servers are reliable. That’s not enough.

    Its whole point is privacy + identity isolation: no shared phone number, no account ID tying your contacts together.

    But that removes the usual escape hatch. On other apps, if things break you just call or SMS to reconnect. SimpleX has no such fallback, by design.

    So resilience must be built in. Automatic backup routing isn’t a nice-to-have; it’s mandatory because privacy leaves you nothing else to fall back on.

    #SimpleX #Privacy #SecureMessaging #Redundancy #SimpleXChat

  3. exitchatcontrol.org

    This site is a comprehensive guide that aims to list all the tools necessary to bypass any surveillance system for your private messaging.

    The site is open source and will be continuously improved.

    #ChatControl #Privacy #DigitalRights #Encryption #OnlinePrivacy #CyberSecurity #OpenSource #FreedomTech #SecureMessaging #ExitChatControl

  4. WhatsApp Clone, but Decentralized with P2P Messaging

    App: Enkrypted.Chat

    "Secure and private" is the general goal.

    This is a technical/concept demo of a fairly unique approach using a browser-based, local-first and webrtc.

    This is intended to introduce a new paradigm in client-side managed secure cryptography. We can avoid registration of any sort.

    Features:

    * P2P
    * End to end encryption
    * Signal protocol
    * Post-Quantum cryptography
    * File transfer
    * Local-first
    * No registration
    * No installation
    * No database
    * TURN server

    Feel free to reach out for clarity instead of diving into the docs/code.

    IMPORTANT: While this is aiming to provide a secure experience, it isnt audited or reviewed. **Shared for testing, feedback and demo purposes only.** Please use responsibly.

    #Privacy #OpenSource #P2P #WebRTC #Decentralization #DigitalSovereignty #CyberSecurity #FOSS #SelfHosted #NoCloud #AntiCorp #Encryption #WebDev #TechLiberty #PrivateMessaging #Networking #DataPrivacy #InternetFreedom #LocalFirst #SoftwareEngineering #WebApps #ZeroKnowledge #PrivacyTech #IndieDev #NoSignup #NoInstall #DecentralizedWeb #SecureMessaging #BrowserApp #TechEthics #P2P #WebRTC #PeerJS #ZeroData #EphemeralData #Encryption #E2EE #BrowserToBrowser #NoInstall #Privacy #Security #Decentralized #Messaging #VideoCall #NoTracking #PrivateMessaging #Prototype #Demo #WorkInProgress #CloseSource #OpenSource #WebDev #GitHub #TechDevelopment #WhatsApp #ChatApp #InstantMessaging #PWA

  5. As we enter the second half of 2026, I am happy to announce that I have officially become an #XMPP user.

    I'm at kaifi[at]openim.nl.
    Write the most diabolical message that you can to me :D

    p.s. post number 1200 :P

    #xmpp #privacy #decentralization #securemessaging #security #cybersecurity

  6. RE: mastodon.social/@airmessenger/

    Good morning @republica ☀️
    Yesterday was awesome, with so many great conversations about #secureMessaging and Air 🤩

    If you're also interested in giving @airmessenger a try or just want to chat — ping me and we can meet up.
    #rp26

  7. Decentralized WhatsApp Clone - No Setup or Signup

    positive-intentions.com

    This is intended to introduce a new paradigm in client-side managed secure cryptography. We can avoid registration of any sort. A fairly unique offering for a messaging app.

    No need for things like phone numbers or registering to any app stores. There are no databases to be hacked Allowing users to send E2EE messages; no cloud, no trace.

    #Privacy #OpenSource #P2P #WebRTC #Decentralization #DigitalSovereignty #CyberSecurity #FOSS #SelfHosted #NoCloud #AntiCorp #Encryption #WebDev #TechLiberty #PrivateMessaging #Networking #DataPrivacy #InternetFreedom #LocalFirst #SoftwareEngineering #WebApps #ZeroKnowledge #PrivacyTech #IndieDev #NoSignup #NoInstall #DecentralizedWeb #SecureMessaging #BrowserApp #TechEthics

  8. Telegram isn't the private messaging app that you think it is. There's more to it, and most of it you've never heard until now.

    I've written about this last year, and I believe it's time to publish it into my new WordPress blog.

    kaifisahil.wordpress.com/2026/

    #telegram #privacy #freespeech #securemessaging #signal

  9. itsfoss.com/news/session-call-

    Session has issued a plea for help and donations.

    as it is right now in 90-days session will essentially be no more.

    All paid staff have already been let go, and everything is being run completely by volunteers, so it remains available on app-stores and websites, but that will change if they don't get help.

    #session #Privacy #SecureMessaging

  10. Is this a #secure #MessagingApp? Maybe not yet, but it’s time to think about #DigitalPrivacy.

    Imagine a #Messaging platform that’s as #secure as #Signal but requires #NoRegistration and #NoInstallation. By leveraging #WebRTC for direct #BrowserToBrowser communication, this #OpenSource project eliminates the #Middleman entirely. Simply share a unique #URL to establish an #Encrypted #PrivateChannel. It is a #Lightweight, #Disposable method to bypass #DataHarvesting and reclaim #DigitalSovereignty.

    This project introduces a new #Paradigm in #ClientSide managed #Encryption. Send #Secure messages with #NoSetup, #NoCloud, and #NoTrace.

    Experience the #Features:
    * #PWA (#ProgressiveWebApp) for instant access
    * #P2P (#PeerToPeer) connectivity
    * #EndToEndEncryption (#E2EE)
    * #SignalProtocol & #PostQuantum #Cryptography
    * #Multimedia, #FileTransfer, & #VideoCalls
    * #NoDatabase & #Stateless architecture
    * #TURN server support for reliable connections

    While not yet a direct replacement for #Simplex or #WhatsApp, this introduces a unique approach to #SecureCommunication.

    Try the #LiveDemo now:
    p2p.positive-intentions.com/if

    Explore the #Technical roadmap:
    positive-intentions.com/docs/t

    Read the full #Documentation:
    positive-intentions.com/docs/t

    #PrivacyTech #Privacy #CyberSecurity #Infosec #WebDev #JavaScript #Decentralized #EncryptionProtocol #QuantumResistant #Tech #FOSS #SoftwareEngineering #DataPrivacy #SecureChat #NoLog #P2PChat #WebRTCProtocol #Coding #DevCommunity #DigitalPrivacy #InternetFreedom #SecureMessaging #WebTech #AppDevelopment #CryptographyResearch #PrivateMessaging #WebPlatform #ZeroTrust #Innovation

  11. Looks like digitalprivacy.diy/ (a Matrix home server) is shutting down at the end of March 2026

    I've created an account on Matrix.org, for now, until I find a better home server or decide to run my own, lol

    #Matrix #MatrixServer #Element #E2EE #SecureMessaging

  12. Signal Protocol for a P2P Webapp

    TL;DR: I have open-sourced a #Rust implementation of the #SignalProtocol that compiles to #WASM for #Browser-based #P2P messaging, overcoming the #NodeJS limitations of the official library.

    I am sharing my implementation of the Signal Protocol designed specifically for the #Frontend. While the official libsignal is the gold standard, its #JavaScript targets are often optimized for Node.js, which creates integration challenges for client-side web applications.

    My version is built in #RustLang and compiles to #WebAssembly, utilizing #ModuleFederation to provide robust #Encryption for decentralized environments. It currently powers the end-to-end security for my #P2P messaging project.

    Protocol Demo:
    signal.positive-intentions.com/

    P2P App Demo:
    p2p.positive-intentions.com/if

    I am looking for feedback from the #Dev and #Infosec community. If you have experience with #Cryptography audits or formal-proof verification, I would appreciate your eyes on the codebase as I work toward a more finished state.

    GitHub Repository:
    github.com/positive-intentions

    #Signal #SignalProtocol #Rust #RustLang #WASM #WebAssembly #OpenSource #OSS #Privacy #Encryption #E2EE #WebDev #Frontend #BrowserTech #Decentralized #WebApps #Coding #Security #SoftwareEngineering #Networking #PeerToPeer #P2P #Cryptography #Audit #CyberSecurity #Tech #JavaScript #Programming #ModuleFederation #P2PWeb #PrivacyTech #SecureMessaging #WebPerf #TechCommunity #InfoSec #WebSecurity

  13. WhatsApp Clone... But Decentralized and P2P Encrypted Without Install or Signup.

    Features include:
    * P2P
    * End to end encryption
    * forward secrecy
    * Multimedia
    * Open source
    * No registration
    * No installation
    * Encrypted storage
    * TURN server

    The project is far from finished and presented for testing, feedback and demo purposes (USE RESPONSIBLY!).

    positive-intentions.com

    #Privacy #OpenSource #P2P #WebRTC #Decentralization #DigitalSovereignty #CyberSecurity #FOSS #SelfHosted #NoCloud #AntiCorp #Encryption #WebDev #TechLiberty #PrivateMessaging #Networking #DataPrivacy #InternetFreedom #LocalFirst #SoftwareEngineering #WebApps #ZeroKnowledge #PrivacyTech #IndieDev #NoSignup #NoInstall #DecentralizedWeb #SecureMessaging #BrowserApp #TechEthics

  14. WhatsApp Clone... But Decentralized and P2P Encrypted Without Install or Signup.

    By leveraging WebRTC for direct browser-to-browser communication, it eliminates the middleman entirely. Users simply share a unique URL to establish an encrypted, private channel. This approach effectively bypasses corporate data harvesting and provides a lightweight, disposable communication method for those prioritizing digital sovereignty.

    Features include:
    * P2P
    * End to end encryption
    * forward secrecy
    * Multimedia
    * Open source
    * No registration
    * No installation
    * Encrypted storage
    * TURN server

    The project is far from finished and presented for testing, feedback and demo purposes (USE RESPONSIBLY!).

    Technical breakdown: reddit.com/r/CorpFree/comments

    Demo: p2p.positive-intentions.com/if

    #Privacy #OpenSource #P2P #WebRTC #Decentralization #DigitalSovereignty #CyberSecurity #FOSS #SelfHosted #NoCloud #AntiCorp #Encryption #WebDev #TechLiberty #PrivateMessaging #Networking #DataPrivacy #InternetFreedom #LocalFirst #SoftwareEngineering #WebApps #ZeroKnowledge #PrivacyTech #IndieDev #NoSignup #NoInstall #DecentralizedWeb #SecureMessaging #BrowserApp #TechEthics

  15. The encryption is only on messages.
    In general, all but a few would continue to monitor who you speak with, when, and where.
    Use Resonance for communication without collecting any metadata. Click below. 👇

    resonance.my/

    #PrivacyMatters #SecureMessaging #Metadata #DigitalFreedom #Resonance #PrivacyTech #Neuronus

  16. Messaging applications such as XChat are helping redefine how users interact; however, simply having encryption does not equate to trust.

    In many of today's conversations, users are finding they move towards exchanging payments, contracts, and other forms of real value.

    Read our blog to explore how Resonance adds the trust layer messaging platforms are missing.

    neuronus.net/en/blog/elon-musk

    #SecureMessaging #DigitalCommunication #XChat #PrivacyTech #DecentralizedTrust #Resonance #Neuronus

  17. ICYMI: We covered the rise of offline, encrypted, and censorship-resistant messaging apps — tools that keep conversations alive even when networks fail or systems censor traffic. Whether you care about human rights, enterprise continuity, or just staying private online, there is a shift happening in secure communication tech.
    medium.com/@biytelum/offline-e
    #DataPrivacy #SecureMessaging #Encryption #B2B #TechTrends

  18. Even if your messages are encrypted, All the data surrounding your communication is available in your metadata.

    It's time to stop leaving a trail. Pick Resonance for a messaging service that does not collect any metadata.

    #PrivacyMatters #SecureMessaging #NoTraces #DigitalFreedom #Whatsapp #Resonance #Neuronus