Signal Protocol for a P2P Webapp

TL;DR: I have open-sourced a #Rust implementation of the #SignalProtocol that compiles to #WASM for #Browser-based #P2P messaging, overcoming the #NodeJS limitations of the official library.

I am sharing my implementation of the Signal Protocol designed specifically for the #Frontend. While the official libsignal is the gold standard, its #JavaScript targets are often optimized for Node.js, which creates integration challenges for client-side web applications.

My version is built in #RustLang and compiles to #WebAssembly, utilizing #ModuleFederation to provide robust #Encryption for decentralized environments. It currently powers the end-to-end security for my #P2P messaging project.

Protocol Demo:
https://signal.positive-intentions.com/

P2P App Demo:
https://p2p.positive-intentions.com/iframe.html?globals=&id=demo-p2p-messaging--p-2-p-messaging&viewMode=story

I am looking for feedback from the #Dev and #Infosec community. If you have experience with #Cryptography audits or formal-proof verification, I would appreciate your eyes on the codebase as I work toward a more finished state.

GitHub Repository:
https://github.com/positive-intentions/signal-protocol

#Signal #SignalProtocol #Rust #RustLang #WASM #WebAssembly #OpenSource #OSS #Privacy #Encryption #E2EE #WebDev #Frontend #BrowserTech #Decentralized #WebApps #Coding #Security #SoftwareEngineering #Networking #PeerToPeer #P2P #Cryptography #Audit #CyberSecurity #Tech #JavaScript #Programming #ModuleFederation #P2PWeb #PrivacyTech #SecureMessaging #WebPerf #TechCommunity #InfoSec #WebSecurity

Signal Protocol for a P2P Webapp

TL;DR: I have open-sourced a #Rust implementation of the #SignalProtocol that compiles to #WASM for #Browser-based #P2P messaging, overcoming the #NodeJS limitations of the official library.

I am sharing my implementation of the Signal Protocol designed specifically for the #Frontend. While the official libsignal is the gold standard, its #JavaScript targets are often optimized for Node.js, which creates integration challenges for client-side web applications.

My version is built in #RustLang and compiles to #WebAssembly, utilizing #ModuleFederation to provide robust #Encryption for decentralized environments. It currently powers the end-to-end security for my #P2P messaging project.

Protocol Demo:
https://signal.positive-intentions.com/

P2P App Demo:
https://p2p.positive-intentions.com/iframe.html?globals=&id=demo-p2p-messaging--p-2-p-messaging&viewMode=story

I am looking for feedback from the #Dev and #Infosec community. If you have experience with #Cryptography audits or formal-proof verification, I would appreciate your eyes on the codebase as I work toward a more finished state.

GitHub Repository:
https://github.com/positive-intentions/signal-protocol

#Signal #SignalProtocol #Rust #RustLang #WASM #WebAssembly #OpenSource #OSS #Privacy #Encryption #E2EE #WebDev #Frontend #BrowserTech #Decentralized #WebApps #Coding #Security #SoftwareEngineering #Networking #PeerToPeer #P2P #Cryptography #Audit #CyberSecurity #Tech #JavaScript #Programming #ModuleFederation #P2PWeb #PrivacyTech #SecureMessaging #WebPerf #TechCommunity #InfoSec #WebSecurity

New blogpost:

"decoded.legal's .onion site no longer has TLS / https"

I've just turned off the TLS cert and config for dlegal66uj5u2dvcbrev7vv6fjtwnd4moqu7j6jnd42rmbypv3coigyd.onion.

This does not affect decoded.legal's clearweb site.

https://neilzone.co.uk/2026/02/decodedlegals-onion-site-no-longer-has-tls--https/

#Tor #encryption #blog

Tor Browser 16.0a3 alpha now available, with Firefox security updates, Tor 0.4.9.5, NoScript 13.5.12 🛡️

Updates disable online suggestions, adjust adult content flags vs fingerprinting, extend WASM blocking to workers, add UTC timestamps to logs 🔧

Alpha for testing only - stable advised for at-risk users ⚠️

@torproject

🔗 https://blog.torproject.org/new-alpha-release-tor-browser-160a3/

#TechNews #Privacy #Security #Cybersecurity #OpenSource #Browser #Anonymity #DataProtection #FOSS #Linux #Infosec #Encryption #Tor #Browser #Mozilla

Tor Browser 16.0a3 alpha now available, with Firefox security updates, Tor 0.4.9.5, NoScript 13.5.12 🛡️

Updates disable online suggestions, adjust adult content flags vs fingerprinting, extend WASM blocking to workers, add UTC timestamps to logs 🔧

Alpha for testing only - stable advised for at-risk users ⚠️

@torproject

🔗 https://blog.torproject.org/new-alpha-release-tor-browser-160a3/

#TechNews #Privacy #Security #Cybersecurity #OpenSource #Browser #Anonymity #DataProtection #FOSS #Linux #Infosec #Encryption #Tor #Browser #Mozilla

@scottjenson
Signal is my go-to when I feel there's a need for #Encryption. If it was available in Mastodon for private messages, I'd probably use it.

I don't think the Fediverse is on the radar of the current administration here in the US yet, but they might be someday. What happens when law enforcement types show up at a Masto admin's doorstep? Do they give up all the data willingly? Even without a subpoena or judge's order?

X's documentation explicitly states:

"Direct messages are not protected against hacking or unauthorised access."

If messages aren't protected against hacking, they're not encrypted properly.

This is encryption theatre, not encryption.

Words matter in security.

#Encryption #Cybersecurity #Twitter #Privacy

X's documentation explicitly states:

"Direct messages are not protected against hacking or unauthorised access."

If messages aren't protected against hacking, they're not encrypted properly.

This is encryption theatre, not encryption.

Words matter in security.

#Encryption #Cybersecurity #Twitter #Privacy

Real end-to-end encryption (Signal):
- Messages encrypted on your device
- Only the recipient can decrypt
- Service provider CANNOT read
- Even if hacked, messages stay encrypted

X's "encryption":
- X can read your messages
- Not protected against hacking
- X controls the keys

See the difference?

#E2EE #Signal #Encryption #Privacy

Real end-to-end encryption (Signal):
- Messages encrypted on your device
- Only the recipient can decrypt
- Service provider CANNOT read
- Even if hacked, messages stay encrypted

X's "encryption":
- X can read your messages
- Not protected against hacking
- X controls the keys

See the difference?

#E2EE #Signal #Encryption #Privacy

That's it.

Cancelled my Nitro subscription (bye bye paying $4, because they never raised prices for already subscribed), and moved all the people I was still talking to there to Matrix.

Now Discord is only for non-private stuff, like official game servers and FOSS projects servers, basically as support hotline.

All my personal, private talks are now on E2EE channels - Matrix for friends, Messenger for family.

Free at last

#discord #matrix #encryption #nitro #freedom #funny #foss #fediverse

«dCode - Online Ciphers, Solvers, Decoders, Calculators:
dCode is the universal site for decipher coded messages, cheating on letter games, solving puzzles, geocaches and treasure hunts, etc.»

This data-collecting website is often suggested to me when I am looking for something for data security and encryption. Are there any data-saving online alternatives in this regard?

🔑 https://www.dcode.fr/en

#dcode #encryption #cipher #itsecurity #decoded #calculator #alternative #askfedi #datasecurity

What X actually has:

"Encryption in transit and at rest"

Translation:
✅ Encrypted traveling to X's servers
✅ Encrypted sitting on X's servers
❌ X holds the decryption keys
❌ X can read everything

That's not end-to-end encryption. That's just locked with X holding the key.

#Encryption #E2EE #Twitter #Privacy

What X actually has:

"Encryption in transit and at rest"

Translation:
✅ Encrypted traveling to X's servers
✅ Encrypted sitting on X's servers
❌ X holds the decryption keys
❌ X can read everything

That's not end-to-end encryption. That's just locked with X holding the key.

#Encryption #E2EE #Twitter #Privacy

Elon tweets: "X Chat is now encrypted!"

X's documentation says: "We may access your messages for safety and security purposes."

Both can't be true.

If X can access your messages, they're NOT end-to-end encrypted.

Full breakdown: https://snugg.social/en/blog/x-twitter-encryption-elon-musk-documentation-contradiction

#Twitter #X #Encryption #Privacy #Misleading

Elon tweets: "X Chat is now encrypted!"

X's documentation says: "We may access your messages for safety and security purposes."

Both can't be true.

If X can access your messages, they're NOT end-to-end encrypted.

Full breakdown: https://snugg.social/en/blog/x-twitter-encryption-elon-musk-documentation-contradiction

#Twitter #X #Encryption #Privacy #Misleading

«dCode - Online Ciphers, Solvers, Decoders, Calculators:
dCode is the universal site for decipher coded messages, cheating on letter games, solving puzzles, geocaches and treasure hunts, etc.»

This data-collecting website is often suggested to me when I am looking for something for data security and encryption. Are there any data-saving online alternatives in this regard?

🔑 https://www.dcode.fr/en

#dcode #encryption #cipher #itsecurity #decoded #calculator #alternative #askfedi #datasecurity

«Is End-to-End Encryption Optional For Large Groups?
One of the recent topics in Messaging App Discourse is whether it makes sense to prioritize End-to-End Encryption (E2EE) when searching for an alternative to Discord.»
— by @soatok.blog

Encryption rarely has anything to do with secrecy, but with the reality of the source and the trust in their data.

🔐 https://soatok.blog/2026/02/14/is-end-to-end-encryption-optional-for-large-groups/

#e2ee #discord #chat #groupchat #app #messaging #endtoendencrypted #chat #encryption #itsecurity #softwaresecurity