end-to-end
web-client
end-to-end | web-client | |
---|---|---|
8 | 137 | |
4,133 | 433 | |
0.0% | 1.2% | |
0.0 | 4.9 | |
about 1 year ago | 11 days ago | |
JavaScript | JavaScript | |
Apache License 2.0 | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
end-to-end
-
age and authenticated encryption
[1] No warning on decrypting Tag 9 (no integrity protection) packets
-
A few questions for the devβ¦
In contrast, companies like Standard Notes actually uses their own home-built encryption library, which is why it's a bit more critical that they go through these audits more often and quickly than others. And despite the audits, this home-brewed encryption library puts them at a much bigger risk, due to the fact that it's never going to be as thoroughly battle tested as an open industry-standard encryption like OpenPGP, used by much larger companies like Google, Protonmail, etc.
- End-to-End Encryption Threat Model
-
End-to-end encryption messaging implementation
https://github.com/google/end-to-end ?
-
How to do E2EE in the Browser correctly if even possible?
When Google was looking at implementing E2E mail via a browser plugin, it gave up in part because of the difficulties of doing it right. They published the library and documentation, but the more valuable part was the threat model. In it they examine the assets to protect, threat sources both inside and outside the threat model, UI threats, message threats, key-related threats, cryptographic threats, and other threats. It's an excellent walk-through of just how difficult it is to do general encryption right, and why doing it in the browser is so hard.
-
Signal protocol security of messages
With that in mind, secure messaging in a browser is a nightmare. Google tried to figure out a way to do end-to-end in a browser, mostly in the context of e-mail but it could be extended to chat applications. They wrote up a threat model that you really should read. They identified five threat sources within the architecture and six more that they acknowledge but don't delve into. They also discuss four UI-based threats, four message-based, four key-based, and two cryptographic threats, and each of those threats has subthreats. Finally, they wrap with three "Other" threats. They dropped the project soon after.
-
Browser extension that makes any web app E2E encrypted?
Google E2E Library β Unsure how up-to-date this ... limited GitHub activity.
web-client
-
Svelte Native: The Svelte Mobile Development Experience
> The only major hurdle to this is Apple continuing to treat web apps as second class citizens on iOS
If you add a site to iOS' homescreen it automatically becomes a PWA. The best example I found of a site fully leveraging this feature is Cryptee[0]. They talk about the PWA thing here: https://crypt.ee/download
[0] https://crypt.ee/
-
Hard for me to trust UpNote
Well, then - if self hosting is not your thing - something like crypt.ee might be your thing? Clearly a different pricing model, data is fully encrypted, open source, across platforms.
-
Where do you write? Why?
https://crypt.ee now. I used to mostly use local markdown editors like Ulysses and Zettlr.
-
Need suggestions for Free, Open-source, privacy focused diary/Journaling app?
Crypt.ee Ticks 1/2/3/5 of your requirements However free tier only has 100MB storage which might be enough for a journal, it also has the best rich text editor of them all, would highly recommend.
-
GitHub: List of open-source alternatives to everyday SaaS products
Crypt.ee for note-taking!
-
Google Drive alternative for editing files on all devices
I've only used it for editing docs but have found crypt.ee very easy to use.
- Photos Zero knowledge encryption
-
Moving my ecosystem from gmail to proton, what to do about Docs,Sheets,Slides,Forms? What services are available?
Cryptee (https://crypt.ee) currently lacks spreadsheet but has a fantastic encrypted word processor/doc suite as well as Photos/Videos
-
What is a good open source and privacy friendly Android E-reader for books?
Cryptee (https://crypt.ee) has native support for epub books and is client-side encrypted so very private
- I hvilken sky gemmer i jeres digitale billeder og videoer?
What are some alternatives?
openpgpjs - OpenPGP implementation for JavaScript
Tasmota - Alternative firmware for ESP8266 and ESP32 based devices with easy configuration using webUI, OTA updates, automation using timers or rules, expandability and entirely local control over MQTT, HTTP, Serial or KNX. Full documentation at
freedom-pgp-e2e - Wrapping up end-to-end code and provide in freedom custom API.
Joplin - Joplin - the secure note taking and to-do app with synchronisation capabilities for Windows, macOS, Linux, Android and iOS.
otrv4 - Off-the-Record Messaging Protocol version 4. -This is a draft- This repository is a mirror of http://bugs.otr.im/otrv4/otrv4
Cryptomator - Multi-platform transparent client-side encryption of your files in the cloud
PGP-Anywhere - Chrome browser extension to de- & encrypt PGP in your browser
marktext - πA simple and elegant markdown editor, available for Linux, macOS and Windows.
2key-ratchet - 2key-ratchet is an implementation of a Double Ratchet protocol and X3DH in TypeScript utilizing WebCrypto.
privacytools.io - π‘π You are being watched. Protect your privacy against global mass surveillance.
2Password - 2Password: A cryptography experiment
CryptPad - Collaborative office suite, end-to-end encrypted and open-source.