TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Show HN: Send browser-encrypted messages over self-destructing read-once URLs

9 pointsby brianhempelalmost 10 years ago

1 comment

brianhempelalmost 10 years ago
Author here. There are other services that do this sort of thing, but none that accomplished all these goals:<p>1. Browser-encrypted so the server cannot decrypt it. The decryption key is stored in the URL fragment after the # so the server never sees the decryption key. (Fragments are not sent in HTTP requests.)<p>2. Secrets never touch disk. SneakyNote.com even goes to lengths to clear the in-memory buffers on storage&#x2F;access.<p>3. Verified delivery. If you&#x27;re going to send the link over an insecure channel, you can&#x27;t prevent someone else from getting to it first. But you&#x27;d like to know if they replaced your link. The verification code step solves this problem.<p>4. Open source.<p>Incidentally, this is written in Go because it of its good HTTP support and because Go is a memory-safe language that will also allow you to clear memory.