Skip to main content
NewsPublished

Is This a Secure and Private P2P Messaging App?

Source Reddit BlueTeam

0

Discussion

This report discusses a browser-based peer-to-peer (P2P) messaging app demo called Enkrypted. Chat, which aims to provide secure and private communication using end-to-end encryption, the Signal protocol, and post-quantum cryptography. The app is local-first, requires no registration or installation, and uses WebRTC with TURN servers for connectivity. It is currently a work in progress and has not undergone formal security audits or reviews. The project is shared for testing and feedback purposes only, and users are cautioned to use it responsibly. No confirmed vulnerabilities or exploits are reported at this time.

r/AskNetsec (opens in a new tab)u/Accurate-Screen87740 points0 comments

This is hardly an alternative to signal (or any other secure messaging app), but it's a work in progress and "secure and private" is the general goal.

Whitepaper: https://positive-intentions.com/docs/technical/whitepaper/complete-whitepaper

Protocol spec: https://positive-intentions.com/docs/technical/whitepaper/complete-protocol-spec

This is a technical/concept demo of a fairly unique approach using a browser-based, local-first and webrtc.

App demo: Enkrypted.Chat

This is intended to introduce a new paradigm in client-side managed secure cryptography. We can avoid registration of any sort.

Features:

  • P2P
  • End to end encryption
  • Signal protocol
  • Post-Quantum cryptography
  • File transfer
  • Local-first
  • No registration
  • No installation
  • No database
  • TURN server

Some open source versions of the core concepts.

Feel free to reach out for clarity instead of diving into the docs/code.

IMPORTANT: While this is aiming to provide a secure experience, it isnt audited or reviewed. Shared for testing, feedback and demo purposes only. Please use responsibly.

References

Community reviews

Loading reviews…