https://safer.chat is an end-to-end encrypted webchat that allows users to create rooms with up to 4 participants. The idea is to have what crypto cat used to be, without the need to install browser extensions or applications. In 2019 we have the Web Crypto API which allows us to do all operations.
We do not store any tracking information or history, and the server logs don't include any keys or encrypted messages. In fact, all of the server's data lives in-memory.
To start a conversation, you need to choose a room and a password, then, only people knowing these details can log into that room, this password isn't transferred in plain text.
We hope you enjoy it.
There are two components, the web and the server. The web component is the frontend app that you see at https://safer.chat, it uses the server to exchange the keys and the messages between room participants.
- While joining a room, the app generates an RSA 2048 key-pair and shares the public key with the server (see Public-key cryptography).
- When a participant joins a room, it gets the participants and their public keys from the server.
- Each time a message is sent, it is encrypted using each participant's public key and sent to the server, which knows how to reach the participants.
As you can see by reading the technical details, all messages sent to the server are encrypted, any WebSocket debugger can be used to verify that the server doesn't alter any encrypted message or keys.
The project is a mono repository involving the following components:
- The web project is the frontend app, what you see at https://safer.chat is what the web has, it is built using Angular, communicates to the server project using a web socket.
- The server project is what connects the peers, it allows them to exchange their keys and messages, as well as handling the room reservation, it is built with Scala.
- The infra project has the deployment scripts, it uses Ansible.