Throwaway – single-use, 1-1, e2e encrypted messaging (in-browser)
Throwaway – single-use, 1-1, e2e encrypted messaging (in-browser)
Hi HN! Keen to get your thoughts on an encrypted messaging app I've made: throwaway is an in-browser messaging app. It's specifically for single-use, one-to-one, e2e encrypted messaging. This means your messages are encrypted in your browser, and they are only decrypted when they reach your recipients browser. The messages disappear permanently once both browser windows have closed. You can never recover a throwaway chat; once the window is closed, it's gone forever. throwaway uses the SubtleCrypto Web API to create a public/private key pair every time it is opened/refreshed (ECDH P-521). You can invite a recipient to start a chat using the invite link; automatically generated when you land on the page. Once a recipient has clicked on the invite link, throwaway generates them a key pair too. The public keys are shared so each user can derive symmetric keys (AES-GCM 256, forward secrecy) to encrypt messages that can only be decrypted by their recipients symmetric key. The private keys and derived symmetric keys never leave the browser window they were created in. All ideas/thoughts/critiques welcome, thanks!
Share cardActual performance
Launch Intel predictions
Analyze your own launch →Correct prediction on native model
Similar products
I.CX – Encrypted messaging in your browser
Encrypted Messaging
The standalone, encrypted messaging app from X
Single-Use Dropbox
McNeal – Encrypted messaging over acoustic channels
Zuccnet: Encrypted Facebook Messaging
ZuccNet – Encrypted Facebook Messaging
EMP – Open Source Encrypted Messaging
Tenta – A private encrypted browser
Encrypted Pastebin