#signalprotocol — Public Fediverse posts

Decentralized browser-based P2P E2EE messaging.

The key detail that sets this apart from other messaging apps is the browser-based client-side cryptography philosophy.

No need to install anything. Your ID is crypto-random and so the app doesnt need to rely on any central registration system like phone numbers. Your ID is unguessable and to connect to someone, you have to explicitly share it.

WebRTC has other nuances like being to route through a shared network for secure/faster transfer.

I hope this project has reached a level i can share the following details. I've made a genuine effort towards documentation and transparancy. I dont think it'll ever be enough and so im still concerned it isnt ready to share. While im using AI throughout. This is not a vibecoded project. There is attention throughout for unit tests and formal-verification. With your feedback, id like to make improvements for clarity throughout.

This version of the app demonstrates a fairly unique approach using a browser-based, local-only and webrtc approach. I know it's impossible for any system to be the "world's most secure", but that isnt a reason to not try. By rigorously implementing an exhaustive list of security features and practices, the aim is to get as close as possible.

* [Enkrypted.Chat](https://enkrypted.chat/)

This is intended to demonstrate client-side managed secure cryptography.

* [Introducing Enkrypted Chat](https://positive-intentions.com/blog/introducing-enkrypted-chat)
* [Whitepaper (work-in-progress)](https://positive-intentions.com/docs/technical/whitepaper/complete-whitepaper)
* [Protocol Spec (work-in-progress)](https://positive-intentions.com/docs/technical/whitepaper/complete-protocol-spec)
* [Roadmap](https://positive-intentions.com/docs/technical/p2p-messaging-technical-breakdown/)

I know ive tried to compress a lot of my journey into one post. The project above is going to be tricky to understand. Feel free to reach out for clarity on any of the details.

IMPORTANT: While this is aiming to provide a secure experience, It is [not audited or reviewed](https://www.reddit.com/r/CyberSecurityAdvice/comments/1su8lir/security_audit_feedback_from_radically_open/). **Shared for testing, feedback and demo purposes only.** Please use responsibly.

#Privacy #OnlinePrivacy #DataPrivacy #Infosec #CyberSecurity #OpSec #DigitalRights #AntiSurveillance #DataOwnership #E2EE #P2P #PeerToPeer #WebRTC #LocalFirst #LocalOnly #NoCloud #NoRegistration #PWA #SignalProtocol #PostQuantum #Cryptography #SecureMessaging #PrivateChat #EncryptedChat #Decentralized #OpenSource #SelfHosted #BetaTesting #FeedbackWelcome #TechDemo #ProofOfConcept #BuildInPublic #IndieDev #DevCommunity

I'd like to share the latest version of my project.

It's a a decentralised P2P messaging app. The aim is of course privacy and security.

It demonstrates a fairly unique approach by using browser-based local-only storage with webrtc.

https://Enkrypted.Chat

https://www.reddit.com/r/positive_intentions/comments/1tq1u62/introducing_enkrypted_chat

---

#Privacy #OnlinePrivacy #DataPrivacy #Infosec #CyberSecurity #OpSec #DigitalRights #AntiSurveillance #DataOwnership #E2EE #P2P #PeerToPeer #WebRTC #LocalFirst #LocalOnly #NoCloud #NoRegistration #PWA #SignalProtocol #PostQuantum #Cryptography #SecureMessaging #PrivateChat #EncryptedChat #Decentralized #OpenSource #SelfHosted #BetaTesting #FeedbackWelcome #TechDemo #ProofOfConcept #BuildInPublic #IndieDev #DevCommunity

Is this a #secure #MessagingApp? Maybe not yet, but it’s time to think about #DigitalPrivacy.

Imagine a #Messaging platform that’s as #secure as #Signal but requires #NoRegistration and #NoInstallation. By leveraging #WebRTC for direct #BrowserToBrowser communication, this #OpenSource project eliminates the #Middleman entirely. Simply share a unique #URL to establish an #Encrypted #PrivateChannel. It is a #Lightweight, #Disposable method to bypass #DataHarvesting and reclaim #DigitalSovereignty.

This project introduces a new #Paradigm in #ClientSide managed #Encryption. Send #Secure messages with #NoSetup, #NoCloud, and #NoTrace.

Experience the #Features:
* #PWA (#ProgressiveWebApp) for instant access
* #P2P (#PeerToPeer) connectivity
* #EndToEndEncryption (#E2EE)
* #SignalProtocol & #PostQuantum #Cryptography
* #Multimedia, #FileTransfer, & #VideoCalls
* #NoDatabase & #Stateless architecture
* #TURN server support for reliable connections

While not yet a direct replacement for #Simplex or #WhatsApp, this introduces a unique approach to #SecureCommunication.

Try the #LiveDemo now:
https://p2p.positive-intentions.com/iframe.html?globals=&id=demo-p2p-messaging--p-2-p-messaging&viewMode=story

Explore the #Technical roadmap:
https://positive-intentions.com/docs/technical/p2p-messaging-technical-breakdown

Read the full #Documentation:
https://positive-intentions.com/docs/technical

#PrivacyTech #Privacy #CyberSecurity #Infosec #WebDev #JavaScript #Decentralized #EncryptionProtocol #QuantumResistant #Tech #FOSS #SoftwareEngineering #DataPrivacy #SecureChat #NoLog #P2PChat #WebRTCProtocol #Coding #DevCommunity #DigitalPrivacy #InternetFreedom #SecureMessaging #WebTech #AppDevelopment #CryptographyResearch #PrivateMessaging #WebPlatform #ZeroTrust #Innovation

TLDR: I’ve implemented #QuantumResistant #Encryption into my #P2P messaging #webapp using #MLKEM (#Kyber) to protect against future #QuantumComputing threats. Read my latest #Blog post to see how I’m securing #DataPrivacy today.

My journey into #PostQuantum #Security
I’ve been working hard on my latest project update, focusing on how we can protect our #Privacy from the looming threat of "harvest now, decrypt later" attacks. I just finished writing a technical deep dive into how I’ve implemented #QuantumResistant #Cryptography into my #P2P messaging platform.

The core of my approach involves using #MLKEM (formerly #Kyber) to ensure long-term #DataSecurity. I’m particularly proud of the #CascadingEncryption layer I’ve built; by combining #NIST standards with the #SignalProtocol, I'm ensuring that your #Communications remain #Secure even if a single algorithm is compromised in the future.

If you are into #OpenSource, #InfoSec, or #Decentralized #Tech, I’d love for you to read about my implementation and the challenges of bringing #QuantumResistance to the #Browser using #JavaScript.

Read my write-up here:
https://positive-intentions.com/blog/quantum-resistant-encryption

Demo: https://cryptography.positive-intentions.com/?path=/story/cascading-cipher-ml-kem-demo--mlkem-standalone

Crash course in ML-KEM: https://positive-intentions.com/blog/ml-kem-beginner-tutorial

I'm excited to hear what the #Developer and #CyberSecurity community thinks about this #PrivacyFirst milestone!

@mkj @sophiekaz

Great overview. Just want to add that Signal is #OpenSource an their #SignalProtocol (see https://en.wikipedia.org/wiki/Signal_Protocol) is used by quite a few other messaging apps. Including Whatsapp and Google.

Signal Protocol for a P2P Webapp

TL;DR: I have open-sourced a #Rust implementation of the #SignalProtocol that compiles to #WASM for #Browser-based #P2P messaging, overcoming the #NodeJS limitations of the official library.

I am sharing my implementation of the Signal Protocol designed specifically for the #Frontend. While the official libsignal is the gold standard, its #JavaScript targets are often optimized for Node.js, which creates integration challenges for client-side web applications.

My version is built in #RustLang and compiles to #WebAssembly, utilizing #ModuleFederation to provide robust #Encryption for decentralized environments. It currently powers the end-to-end security for my #P2P messaging project.

Protocol Demo:
https://signal.positive-intentions.com/

P2P App Demo:
https://p2p.positive-intentions.com/iframe.html?globals=&id=demo-p2p-messaging--p-2-p-messaging&viewMode=story

I am looking for feedback from the #Dev and #Infosec community. If you have experience with #Cryptography audits or formal-proof verification, I would appreciate your eyes on the codebase as I work toward a more finished state.

GitHub Repository:
https://github.com/positive-intentions/signal-protocol

#Signal #SignalProtocol #Rust #RustLang #WASM #WebAssembly #OpenSource #OSS #Privacy #Encryption #E2EE #WebDev #Frontend #BrowserTech #Decentralized #WebApps #Coding #Security #SoftwareEngineering #Networking #PeerToPeer #P2P #Cryptography #Audit #CyberSecurity #Tech #JavaScript #Programming #ModuleFederation #P2PWeb #PrivacyTech #SecureMessaging #WebPerf #TechCommunity #InfoSec #WebSecurity

I have to say, I am no fan of Whatsapp - but being taken to court by a company that builds and deploys spyware, (most notably;; Pegasus) because they claim that it Whatsapp is not E2EE is a bit rich!

Lawsuit Alleges That WhatsApp Has No End-to-End Encryption

https://www.pcmag.com/news/lawsuit-alleges-that-whatsapp-has-no-end-to-end-encryption?test_uuid=04IpBmWGZleS0I0J3epvMrC&test_variant=A

#Whatsapp #NSO #SignalProtocol #Lawsuit

Application-Level Cascading Cipher

https://positive-intentions.com/blog/cascading-cipher-encryption

#encryption #cryptography #defenseindepth #AES #DiffieHellman #MLSCrypto #SignalProtocol #browsercrypto #JavaScriptsecurity #cascadingcipher #layeredencryption #WebCryptoAPI #security

...users of #Signal and other messengers relying on the #SignalProtocol need not concern themselves with any of these new designs. To paraphrase a certain device maker, it just works.

@arstechnica @signalapp #Encryption #Quantum #SPQR
https://arstechnica.com/security/2025/10/why-signals-post-quantum-makeover-is-an-amazing-engineering-achievement/

Signal strengthens encryption against future quantum computers

Read more 👉 https://aboutsignal.com/news/signal-strengthens-encryption-against-future-quantum-computers/

#signal #signalapp #signalmessenger #privacy #cybersecurity #quantum #signalprotocol

Signal krijgt extra beveiliging tegen toekomstige quantumcomputers 🔒

Lees meer 👉 https://signalapp.nl/signal-app-nieuws/signal-krijgt-extra-beveiliging-tegen-toekomstige-quantumcomputers/

#signal #signalapp #signalmessenger #privacy #cybersecurity #quantum #signalprotocol

#twonly uses the #signalprotocol to encrypt all messages end-to-end. As with #signal, you can check the security number via the QR code to make sure that everything went smoothly during the key exchange.

#security #privacy #snapchat #goeuropean #unplugtrump

[2/2] 🔋 **Efficiency Gains:**
✅ Reduced computation➡️reduced energy consumption.
✅ Highly beneficial for low-powered hardware such as IoTs and WSNs.

Skye is accepted at ACM ASIACCS 2024. Discover how Skye transforms secure communication! 🌐🔑 (ePrint - https://ia.cr/2023/781)

#Cybersecurity #Cryptography #KeyDerivation #SignalProtocol #IoT

Woooo the most secure messenger in the world just got even more secure: https://signal.org/blog/pqxdh/

#Signal #QuantumComputing #Encryption #SignalProtocol

So, if you are familiar with Signal and using [Silence] [1], I have some excellent news for you. A keyboard for Android implemented the Signal protocol without the need for servers. This lets you have encrypted messages between two Android users over any channels you have available.

https://f-droid.org/en/packages/com.amnesica.kryptey/

[1]: @silence

#KryptEY
#SilenceApp
#SignalProtocol

@openrightsgroup The #UK can’t stop #PGP #privacy #messagescanning #meta #facebook #whatsapp #signal #signalprotocol

#Twitter will adopt #SignalProtocol for encrypted DMs, according to Jane Manchun Wong. Unfortunately, she deleted her account due to racist attacks against her.

#e2ee #cryptography

https://www.tesmanian.com/blogs/tesmanian-blog/twitter-will-adopt-the-signal-protocol-for-encrypted-dms-says-security-researcher

Automattic pumps $4.6M into New Vector to help grow Matrix, an open, decentralized comms ecosystem - Automattic, the open source force behind WordPress .com, WooCommerce, Longreads, Simplenote and Tum... more: http://feedproxy.google.com/~r/Techcrunch/~3/DlU-ONRwx3w/ #signalprotocol #decentralized #e2eencryption #automattic #newvector #wordpress #security #funding #privacy #europe #matrix #webrtc #jitsi #open #riot #p2p #tc