From 07eafe051ac8d5e426c80a1fd3da74b25de778ef Mon Sep 17 00:00:00 2001 From: ale <ale@incal.net> Date: Mon, 9 Nov 2020 10:27:18 +0000 Subject: [PATCH] Add a README --- README.md | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 README.md diff --git a/README.md b/README.md new file mode 100644 index 0000000..9dbf2fb --- /dev/null +++ b/README.md @@ -0,0 +1,31 @@ +microchat +=== + +An experimental minimalistic ephemeral web-based chat. + +It is meant as a very quick way to exchange real-time messages with +somewhat-trusted parties, with a few peculiar characteristics: + +* no custom application required, it works on desktop and mobile with + just a web browser; +* no user registration process, no connections to external identities + (emails) or any other form of long-term user identity; +* based on a *rendez-vous* workflow, participants agree on a "secret" + beforehand, which in this case is the room name; +* no logs, messages are not persisted in any form except in the + browser window of the participants: when it is closed, they're gone + -- no room history is kept for new participants. + +There is no access control on rooms: if you know a room name, you can +join it. This is partially mitigated by making room membership +prominently visible. + +The chat implements end-to-end encryption, primarily as a way to make +it safe against corporate proxies and such, and to avoid liabilities +for instance operators: participants still need to trust the instance +operator, as it may be serving a back-doored version of the +application. + +From a forensic perspective, all it requires from the participant is +the usage of a browser "incognito" window, to avoid leaving the +instance name in the browser history. -- GitLab