News for hackers. Stuff that matters.

A comment on Show HN: I built a website to share files and messages without any server.

Re:Show HN: I built a website to share files and messages wi... by d-z-m on Sunday May 05, 2024 @06:09AM (#40263612)
I looked around and couldn't find a description of the protocol by which two peers authenticate to each other/transfer files. Also, is the E2EE encryption referred to simply whatever is being used to encrypt the transport(DTLS/SRTP/etc)? or are you doing additional encryption/decryption of files?

Also I'm curious like others, does this only work if no nat traversal is required? or are you leveraging public stun/turn infrastructure?

[ Parent | on HN ]
Re:Show HN: I built a website to share files and messages wi... by meiraleal on Sunday May 05, 2024 @07:21AM (#40263999)
It's webrtc, no?
[ Parent | on HN ]
Re:Show HN: I built a website to share files and messages wi... by dkraj on Monday May 06, 2024 @10:46PM (#40281819)
yes it is using webRTC. will open source the repo soon. BTW there are all information about it in different threads
[ Parent | on HN ]
Re:Show HN: I built a website to share files and messages wi... by dkraj on Sunday May 05, 2024 @08:32AM (#40264368)
WebRTC it is: https://webrtc.org/

Yes only the network layer encryption. No file encryption as it will cost client browsers a lot in case of encrypting and then decrypting that at other end.

I have written more about it here: https://dikshantraj2001.medium.com/nat-stun-turn-and-ice-466...

Currently, I am using the public STUN servers only. If the IPs are not reachable, it would show an error and won't work as setting up TURN server would mean same as a third party server saving in file and serving it over network

[ Parent | on HN ]
Re:Show HN: I built a website to share files and messages wi... by d-z-m on Sunday May 05, 2024 @11:32AM (#40265599)
Ideally I would not have to trust the signalling server to ensure I'm transferring files to who I think I am[0]. Not as much of a knock against your project as a knock against webRTC in general.

[0]: https://webrtchacks.com/webrtc-and-man-in-the-middle-attacks...

[ Parent | on HN ]
Re:Show HN: I built a website to share files and messages wi... by stevenicr on Monday May 06, 2024 @07:36PM (#40280694)
Has anyone considered a passphrase that splits into three words, where the middle server can decrypt one word and deliver a word and get a response then provide the whole phrase three words to prove it is the messenger that Bob sent?

Or something like that?

[ Parent | on HN ]
Re:Show HN: I built a website to share files and messages wi... by porridgeraisin on Sunday May 05, 2024 @09:45AM (#40264860)
You can use https://npmjs.com/e2ee.js (disclaimer: I am the author) for basic end to end encryption in the browser (uses the webcrypto api). It supports encrypting and decrypting a web stream as well which you could use.
[ Parent | on HN ]