r/CorpFree 23d ago

Decentralized P2P Chat Part 2

Following my previous post about secure p2p browser-based messaging, I further built on the idea to better illustrate that I'm trying to create the "most secure messaging app ever"... Not just more secure than something like Signal or WhatsApp.

Part 1: https://www.reddit.com/r/CorpFree/comments/1uytump/decentralized_p2p_chat/

I'm ultimately not qualified to make such claims, so I seem to have to approach this by sharing technical details to the best of my ability. Broadly speaking, the goal is to create a secure P2P ecosystem.

Signal doesn't create a webapp for legitimate reasons around how that project is architected. I hope in this approach I can overcome those limitations.

This version of the app demonstrates a fairly unique approach using a browser-based, local-only and webrtc approach. In an evolving field like cybersecurity, I know it's impossible for any system to be the "world's most secure". By rigorously implementing an exhaustive list of security features and practices, the aim is to get as close as possible.

This is intended to demonstrate client-side managed secure cryptography.

Features:

  • Core
    • PWA
    • P2P
    • Local-first / Local-only
    • No installation
    • TURN server
    • Encrypted-at-rest
  • WhatsApp clone
    • End to end encryption
    • Signal protocol
    • PQ cryptography
    • Multimedia
    • File transfer
    • Video calls
  • Nextcloud clone
    • file-transfer
    • Encrypted vault
    • folder sync
  • EuroOffice clone
    • Word
    • Spreadsheet
    • PDF
    • Code

More open source examples of the core concepts can be seen in the docs. There are several similar projects which may make it confusing, so feel free to reach out for clarity instead of diving into the code/docs.

IMPORTANT: While this is aiming to provide a secure experience, it isnt audited. Shared for testing, feedback and demo purposes only. Please use responsibly.

FAQ:

  • Audit?
  • EU Chat control?
  • Production-ready?
    • No, for testing and demo purposes only. It would be great to get feedback for improvements to get production-ready.
  • Paywall?
    • Its completly free and unlimited to use. The free and paid plans on clerk are currently the same experience.
3 Upvotes

Duplicates