Is This a Secure and Private P2P Messaging App?
Source Reddit BlueTeam
Discussion
This report discusses a browser-based peer-to-peer (P2P) messaging app demo called Enkrypted. Chat, which aims to provide secure and private communication using end-to-end encryption, the Signal protocol, and post-quantum cryptography. The app is local-first, requires no registration or installation, and uses WebRTC with TURN servers for connectivity. It is currently a work in progress and has not undergone formal security audits or reviews. The project is shared for testing and feedback purposes only, and users are cautioned to use it responsibly. No confirmed vulnerabilities or exploits are reported at this time.
r/AskNetsec (opens in a new tab)u/Accurate-Screen87740 points0 comments
This is hardly an alternative to signal (or any other secure messaging app), but it's a work in progress and "secure and private" is the general goal.
Whitepaper: https://positive-intentions.com/docs/technical/whitepaper/complete-whitepaper
Protocol spec: https://positive-intentions.com/docs/technical/whitepaper/complete-protocol-spec
This is a technical/concept demo of a fairly unique approach using a browser-based, local-first and webrtc.
App demo: Enkrypted.Chat
This is intended to introduce a new paradigm in client-side managed secure cryptography. We can avoid registration of any sort.
Features:
- P2P
- End to end encryption
- Signal protocol
- Post-Quantum cryptography
- File transfer
- Local-first
- No registration
- No installation
- No database
- TURN server
Some open source versions of the core concepts.
- Chat
- File
- Crypto
Feel free to reach out for clarity instead of diving into the docs/code.
IMPORTANT: While this is aiming to provide a secure experience, it isnt audited or reviewed. Shared for testing, feedback and demo purposes only. Please use responsibly.
Links cited in the discussion
- https://positive-intentions.com/docs/technical/whitepaper/complete-whitepaper
- https://positive-intentions.com/docs/technical/whitepaper/complete-protocol-spec
- https://github.com/positive-intentions/chat
- https://chat.positive-intentions.com
- https://github.com/positive-intentions/dim/blob/staging/src/stories/05-Hooks-useFS.stories.js
- https://dim.positive-intentions.com/?path=/docs/usefs--docs
- https://github.com/positive-intentions/cryptography
- https://cryptography.positive-intentions.com
References
- positive-intentions.com/docs/technical/whitepaper/complete-whitepaper (opens in a new tab)
- reddit.com/r/AskNetsec/comments/1tz6zer/is_this_a_secure_and_private_p2p_messaging_app/ (opens in a new tab)
- positive-intentions.com/docs/technical/whitepaper/complete-protocol-spec (opens in a new tab)
- github.com/positive-intentions/chat (opens in a new tab)
- chat.positive-intentions.com (opens in a new tab)
- github.com/positive-intentions/dim/blob/staging/src/stories/05-Hooks-useFS.stories.js (opens in a new tab)
- dim.positive-intentions.com (opens in a new tab)
- github.com/positive-intentions/cryptography (opens in a new tab)
- cryptography.positive-intentions.com (opens in a new tab)