submitted 16 hours ago* (last edited 15 hours ago) by xoron@programming.dev to c/privacy@lemmy.ml

6 comments fedilink hide all child comments

IMPORTANT NOTE - READ FIRST:

This is still a work-in-progress and a close-source project (This is what a honeypot would look like). To view the open source MVP version see here. NONE of my projects have been audited or reviewed. I provide them for testing and demo purposes only. NOT to replace your current messaging app (or any other app you use).

BE RESPONSIBLE WHEN USING UNAUDITED SOFTWARE... DO NOT USE FOR SENSITIVE PURPOSES.

Now that I've hit you over the head with caution...

Want to send encrypted WebRTC messages and video calls with no downloads, no sign-ups and no tracking?

This prototype uses WebRTC to establish an encrypted browser-to-browser connection. Everything is ephemeral and cleared when you refresh the page - true zerodata privacy!

Check out the pre-release demo here.

Website: https://positive-intentions.com/
Mastodon: https://infosec.exchange/@xoron

top 6 comments

sorted by: hot top controversial new old

[-] hexagonwin@lemmy.sdf.org 3 points 7 hours ago

How is it better than Jami? Genuinely asking.

[-] xoron@programming.dev 1 points 1 hour ago

Just to be clear, my app is not better than jami (or any other app)... because its unreviewed close-source code.

The key distinction in my approach is that it's a webapp-first approach. You can avoid registration and installation, which is a feature other apps don't provide.

[-] Ferk@lemmy.ml 1 points 12 hours ago* (last edited 12 hours ago)

This still relies on servers to prepare the connection (you need the web server for the page but also I see it tries to connect to wss://0.peerjs.com/), even if later the WebRTC communication is peer to peer.

[-] xoron@programming.dev 4 points 11 hours ago

There are ways around using a central server to establish a p2p connection. It isn't well explained or demonstrated, but the concept seems to work here: https://github.com/positive-intentions/chat/issues/6 .... I'd like to explore this more with exchanging the required data over QR codes or NFC.

Simplex is a great approach for p2p communication. I can easily recommend it over what I have done so far. At the very least, it's gone through things like a professional security audits and seem to keep a high standard in their practices.

[-] crandlecan@mander.xyz 1 points 12 hours ago

Can they shut you down?

[-] xoron@programming.dev 1 points 12 hours ago* (last edited 11 hours ago)

It's a webapp hosted on AWS S3. That can be shut down along with the domain. I'd like to improve the functionality I have for the cacheing, so that it doesn't need to fetch the statics from online if it already previously fetched them.

The open source version has a mirror hosted on GitHub pages. You can fork it and run it yourself there for free: https://positive-intentions.com/blog/docker-ios-android-desktop#github-pages

this post was submitted on 11 Oct 2025

17 points (87.0% liked)

Privacy

42443 readers

617 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS