2026-05-28 16:17 UTC
@xoron@infosec.exchange How do you ensure that the web app served to the user has not been tampered with? Bootstrapping integrity on the web is an unsolved problem with the current web runtimes.
Replies (1)
-
@xoron@infosec.exchange 2026-05-28 17:12
@fabrice@fosstodon.org For a webapp approach, I wanted to try create it in a way that can avoid statics over the network. It would be possible to make it so it runs from index.html without a static server like shown in this version. Check the readme for how to try it out. https://github.com/positive-intentions/chat https://chat.positive-intentions.com The encrypted.chat project is close source and so would have limitations in what I can offer. It would be possible for me to offer an obfuscated static bundle, but such a bundle wouldn't be appealing to anyone to selfhost. In contrast, in the open source version, i don't minify the code. Both versions of the app offer P2P E2EE secure messaging.