2026-09-18 10:56 UTC
Secure and Private Decentralized P2P Encrypted Messaging over Git and WebRTC
This project demonstates a unique approach to secure messaging. The approach is different enough that it can't be easily compared to Signal or SimpleX.
The core philosophy around secure messaging here is that it can work in a way that avoids installation and registration by enabling users to host their own data.
The project is far from finished, but im putting together some docs for the "how it works". It's pretty outside-the-box thinking (and that doesnt make it a good idea), so it would be great if you could share your thoughts on the approach.
Website: Glitr.io
Features:
WebApp
P2P / WebRTC
Local-first / Local-only
No installation
TURN server
Encrypted-at-rest
Signal protocol
Post Quantum cryptography
Video calls
TOR / anonymous via Git
Serverless over WebRTC
#Privacy #OnlinePrivacy #DataPrivacy #Infosec #CyberSecurity #OpSec #DigitalRights #AntiSurveillance #DataOwnership #E2EE #P2P #PeerToPeer #WebRTC #LocalFirst #LocalOnly #NoCloud #NoRegistration #PWA #SignalProtocol #PostQuantum #Cryptography #SecureMessaging #PrivateChat #EncryptedChat #Decentralized #SelfHosted #BuildInPublic #IndieDev #DevCommunity
Replies (2)
-
@clee89@mastodon.social 2026-09-18 11:15
i'd really want the docs to lead with the threat model. git + webrtc changes a bunch of normal messenger assumptions, especially around metadata, key rotation, offline delivery, and how bootstrap/trust works before anyone compares it to signal/simplex.
-
@circus_maximus@social.anoxinon.de 2026-09-18 11:15
@xoron@infosec.exchange Sounds like a fun thing, but how is it working? Is the git repo only the directory for the metadata and then comes the acces via webrtc?