Mastodawn

Is this a #secure #MessagingApp? Maybe not yet, but it’s time to think about #DigitalPrivacy.

Imagine a #Messaging platform that’s as #secure as #Signal but requires #NoRegistration and #NoInstallation. By leveraging #WebRTC for direct #BrowserToBrowser communication, this #OpenSource project eliminates the #Middleman entirely. Simply share a unique #URL to establish an #Encrypted #PrivateChannel. It is a #Lightweight, #Disposable method to bypass #DataHarvesting and reclaim #DigitalSovereignty.

This project introduces a new #Paradigm in #ClientSide managed #Encryption. Send #Secure messages with #NoSetup, #NoCloud, and #NoTrace.

Experience the #Features:
* #PWA (#ProgressiveWebApp) for instant access
* #P2P (#PeerToPeer) connectivity
* #EndToEndEncryption (#E2EE)
* #SignalProtocol & #PostQuantum #Cryptography
* #Multimedia, #FileTransfer, & #VideoCalls
* #NoDatabase & #Stateless architecture
* #TURN server support for reliable connections

While not yet a direct replacement for #Simplex or #WhatsApp, this introduces a unique approach to #SecureCommunication.

Try the #LiveDemo now:
https://p2p.positive-intentions.com/iframe.html?globals=&id=demo-p2p-messaging--p-2-p-messaging&viewMode=story

Explore the #Technical roadmap:
https://positive-intentions.com/docs/technical/p2p-messaging-technical-breakdown

Read the full #Documentation:
https://positive-intentions.com/docs/technical

#PrivacyTech #Privacy #CyberSecurity #Infosec #WebDev #JavaScript #Decentralized #EncryptionProtocol #QuantumResistant #Tech #FOSS #SoftwareEngineering #DataPrivacy #SecureChat #NoLog #P2PChat #WebRTCProtocol #Coding #DevCommunity #DigitalPrivacy #InternetFreedom #SecureMessaging #WebTech #AppDevelopment #CryptographyResearch #PrivateMessaging #WebPlatform #ZeroTrust #Innovation

xoron

Mar 2

TLDR: I’ve implemented #QuantumResistant #Encryption into my #P2P messaging #webapp using #MLKEM (#Kyber) to protect against future #QuantumComputing threats. Read my latest #Blog post to see how I’m securing #DataPrivacy today.

My journey into #PostQuantum #Security
I’ve been working hard on my latest project update, focusing on how we can protect our #Privacy from the looming threat of "harvest now, decrypt later" attacks. I just finished writing a technical deep dive into how I’ve implemented #QuantumResistant #Cryptography into my #P2P messaging platform.

The core of my approach involves using #MLKEM (formerly #Kyber) to ensure long-term #DataSecurity. I’m particularly proud of the #CascadingEncryption layer I’ve built; by combining #NIST standards with the #SignalProtocol, I'm ensuring that your #Communications remain #Secure even if a single algorithm is compromised in the future.

If you are into #OpenSource, #InfoSec, or #Decentralized #Tech, I’d love for you to read about my implementation and the challenges of bringing #QuantumResistance to the #Browser using #JavaScript.

Read my write-up here:
https://positive-intentions.com/blog/quantum-resistant-encryption

Demo: https://cryptography.positive-intentions.com/?path=/story/cascading-cipher-ml-kem-demo--mlkem-standalone

Crash course in ML-KEM: https://positive-intentions.com/blog/ml-kem-beginner-tutorial

I'm excited to hear what the #Developer and #CyberSecurity community thinks about this #PrivacyFirst milestone!

Introducing Quantum-Resistant Encryption in JavaScript | positive-intentions

We're excited to announce that our P2P messaging application now supports quantum-resistant encryption using ML-KEM (CRYSTALS-Kyber), a NIST-standardized post-quantum key encapsulation mechanism. This addition brings quantum-resistant security to our cascading cipher system, providing protection against future quantum computing attacks.

positive-intentions

Thomas Svensson 🖖Feb 24

@mkj @sophiekaz

Great overview. Just want to add that Signal is #OpenSource an their #SignalProtocol (see https://en.wikipedia.org/wiki/Signal_Protocol) is used by quite a few other messaging apps. Including Whatsapp and Google.

Signal Protocol - Wikipedia

xoron

Feb 23

Signal Protocol for a P2P Webapp

TL;DR: I have open-sourced a #Rust implementation of the #SignalProtocol that compiles to #WASM for #Browser-based #P2P messaging, overcoming the #NodeJS limitations of the official library.

I am sharing my implementation of the Signal Protocol designed specifically for the #Frontend. While the official libsignal is the gold standard, its #JavaScript targets are often optimized for Node.js, which creates integration challenges for client-side web applications.

My version is built in #RustLang and compiles to #WebAssembly, utilizing #ModuleFederation to provide robust #Encryption for decentralized environments. It currently powers the end-to-end security for my #P2P messaging project.

Protocol Demo:
https://signal.positive-intentions.com/

P2P App Demo:
https://p2p.positive-intentions.com/iframe.html?globals=&id=demo-p2p-messaging--p-2-p-messaging&viewMode=story

I am looking for feedback from the #Dev and #Infosec community. If you have experience with #Cryptography audits or formal-proof verification, I would appreciate your eyes on the codebase as I work toward a more finished state.

GitHub Repository:
https://github.com/positive-intentions/signal-protocol

#Signal #SignalProtocol #Rust #RustLang #WASM #WebAssembly #OpenSource #OSS #Privacy #Encryption #E2EE #WebDev #Frontend #BrowserTech #Decentralized #WebApps #Coding #Security #SoftwareEngineering #Networking #PeerToPeer #P2P #Cryptography #Audit #CyberSecurity #Tech #JavaScript #Programming #ModuleFederation #P2PWeb #PrivacyTech #SecureMessaging #WebPerf #TechCommunity #InfoSec #WebSecurity

Show thread

Sammiej Feb 6

Stanford 2016 study proved metadata alone reveals:
- Medical conditions (oncologist calls)
- Financial issues (debt collector patterns)
- Relationship status (divorce lawyer timing)
- Religious practices (prayer time patterns)

Your messages are encrypted.
Your life isn't.

Full technical breakdown: https://bit.ly/4abmebj

#Privacy #WhatsApp #Metadata #Surveillance #E2EE #SignalProtocol

Rob Jan 28

I have to say, I am no fan of Whatsapp - but being taken to court by a company that builds and deploys spyware, (most notably;; Pegasus) because they claim that it Whatsapp is not E2EE is a bit rich!

Lawsuit Alleges That WhatsApp Has No End-to-End Encryption

https://www.pcmag.com/news/lawsuit-alleges-that-whatsapp-has-no-end-to-end-encryption?test_uuid=04IpBmWGZleS0I0J3epvMrC&test_variant=A

#Whatsapp #NSO #SignalProtocol #Lawsuit

xoron

Nov 2

Application-Level Cascading Cipher

https://positive-intentions.com/blog/cascading-cipher-encryption

#encryption #cryptography #defenseindepth #AES #DiffieHellman #MLSCrypto #SignalProtocol #browsercrypto #JavaScriptsecurity #cascadingcipher #layeredencryption #WebCryptoAPI #security

Building Defense-in-Depth Encryption: A Cascading Cipher System | positive-intentions

⚠️ NOTE: This document and related project is not finished. The details in this document are subject to change.

positive-intentions

Jason D. Moss 🇨🇦Oct 29

...users of #Signal and other messengers relying on the #SignalProtocol need not concern themselves with any of these new designs. To paraphrase a certain device maker, it just works.

@arstechnica @signalapp #Encryption #Quantum #SPQR
https://arstechnica.com/security/2025/10/why-signals-post-quantum-makeover-is-an-amazing-engineering-achievement/