Hear me out, the Revolution will need this: an explorable chat interface that facilitates end-to-end encrypted peer-to-peer conversation by simply exchanging public keys and a handshake. That's how we beat them, with Math.

Awesome! Sounds a lot like what Nostr has with encrypted 1-to-1 chats and recently encrypted group chat with MLS, all with easy signed JSON over websockets. Your UI would be amazing for showing Nostr events

Nostr *is* the way to go for a shared chat protocol. The chat units alone enable a more direct raw text secure communication between two nodes, which might be useful to keep on the toolset, but for more complex chat scenarios, Nostr it is!

I’m not entirely sure, but I think @keet_io works like that?

Sadly the trend is that just having the technology will be illegal. Exactly as today you cannot build a bomb in your basement (no matter what your intentions with it are) the same they're going to make illegal the fact of just owning a device that allows strong encryption. Currently we're moving toward hardware that only allows execution of certified OS that in turns only allows execution of certified apps from centrally controlled app stores. All in the name of the kids, of course. If you're not in the 0.000001% percent of world population that is able to build your own chips (and that is willing to risk jail just because of owning uncertified chips that no "good citizen" has any need for), then you will be only able to use that math if you do it by hand yourself.

You don't need a special device to have strong encryption and no one can make encryption algorithms illegal, they are everywhere.

Try walking around in a city while holding a machete (even one you made yourself). Of course no one can stop you to build your own machete, but they can make it arbitrarily difficult and jail you if you do anyway. Sadly current view in governments is "encryption -> you're bad"

It would be funny to watch them jailing everyone at WhatsApp and Telegram for (supposedly) using encryption and also everyone at Google and Apple for providing Web Crypto in their browsers. 😅

Next version of android (google) will block installing of applications that are not on the official store. Google will be able to turn off any app on every phone with android if they so decide. Irrelevant of user choices. Apple already can (and did) do that. They don't need to do anything to all the millions of whatsapp USERS... the just need to order whatsapp to comply with the rules and meta will happily agree. Actually this controlling trend is probably COMING from ms, google, meta, apple and friends... the government actions we see is just BECAUSE of their lobbying. Then they play the sad face of "we were forced to that by the laws".

There’s truth in what you are saying, but that doesn’t mean there isn’t any hope. I am sharing a technically simple way of ensuring your privacy using open source programming tools and mainstream Web APIs, so we are fine, try it out.

How do you share the « encryption » key without a centralized point to pass it « off chain » ???

It is based on public-private keys, so you only need to exchange the public keys, which together with the peer-to-peer handshake offer/answer, can safely be shared through untrusted channels.

bu ne oluyör bu

Soooo matrix?

What I am showcasing is a very minimal unit setup for establishing a private one-to-one chat, all on Web. It is kind of a basic survival tool. For more complex scenarios consider implementing Matrix or Nostr protocols.

mathdriven encryption is gonna be the backbone of our decentralized future, is just the beginning

building on that idea, a decentralized powered platform could amplify the impact of endtoend encryption, kinda like a digital safe haven for free thinkers 💡

in ssl handshake is getting public keys and sending secret key and rest is done by secret key

This is sick? @0dayCTF

boy this sure does sound familiar

“A déjà vu is usually a glitch in the Matrix. It happens when they change something.”

Killer UI visualization. What rendering libraries are used?

Unit is pure JavaScript

Beautiful

I'm in

Bitchat🤷

I have written a protocol over sms past weekend, and a Android app that utilizes this to send encrypted messages. Don't know if I have to release it

Done 🤭

Idk if that’s really needed

It is an essential secure communication device. Kinda of an obvious must have if you want to ensure very basic privacy to be honest.

I don’t think the main challenge here is encryption. The real issue is networking. Hole punching has become nearly impossible because most routers now use symmetric NAT, apply very short UDP timeouts, are often behind multiple layers of NAT, or block UDP traffic entirely. This becomes even more difficult when dealing with mobile phones. I’ve tested several approaches, but I haven’t been able to achieve reliable communication across all types of devices and network setups without relying on some kind of TURN or relay server. Have you faced something similar?

Even if the transport could not be P2P for such reasons, using a middleman server would still do the job in terms of ensuring a private exchange.

Very nice but when they can exploit everyone's phone and just read out the display layer encryption is moot

I’m here I’m still waiting for my phone/car and gas pump to exchange public keys so I can get my fuel stats logged privately. #patentthis

The math always wins