Show HN: Air-gapped file encryption as self-decrypting HTML page

5 comments

• firefax10 minutes ago
  cool project!<p>also does everyone have to enable js to vote, or did i troll too hard? (sorry!)
• lukan31 minutes ago
  I assume the &quot;air gapped&quot; part is merely indicating no internet required?
  • az2267 minutes ago
    Offline would be a better word.
• DylanMerigaud12 hours ago
  Self-decrypting HTML? That&#x27;s an innovative approach.
  • 11223358 minutes ago
    Somebody already has copied this innovative approach and travelled to past apparently: <a href="https:&#x2F;&#x2F;acme.com&#x2F;software&#x2F;securepage&#x2F;" rel="nofollow">https:&#x2F;&#x2F;acme.com&#x2F;software&#x2F;securepage&#x2F;</a>
    • jszymborski37 minutes ago
      Methods like these go way further back than 2010... I recall one that had a reward promised if you could break it.<p>EDIT: Here&#x27;s a patent from 2006 [0]<p>[0] <a href="https:&#x2F;&#x2F;image-ppubs.uspto.gov&#x2F;dirsearch-public&#x2F;print&#x2F;downloadPdf&#x2F;7003800" rel="nofollow">https:&#x2F;&#x2F;image-ppubs.uspto.gov&#x2F;dirsearch-public&#x2F;print&#x2F;downloa...</a>
  • emurlin12 hours ago
    Yeah, I was inspired by self-extracting archives. I wanted to share files with basically no dependencies.<p>The goal was:<p>1. Something that didn&#x27;t require any installation (assuming a web browser)<p>2. Have a single file with no network that could self-decrypt<p>3. Be fully auditable<p>The second point is done by having (sort of(*)) reproducible builds and embedded OpenPGP signatures.<p>The first point is made by cleverly manipulating the HTML structure so that it can decrypt without breaking the PGP signature. It can even decrypt using bare openssl (which was a design goal too, though getting the exact structure right took some work and bug reports).<p>The third point is accomplished by the first two, and by the source being freely available.<p>(*) Depends on the OS at the moment.
    • dang1 hour ago
      I&#x27;m going to move this description to the top and re-up the post - I hope that&#x27;s ok!
• nikhilkxmar5 hours ago
  Cool!
• FatalLogic12 hours ago
  Maybe this is the source?<p><a href="https:&#x2F;&#x2F;github.com&#x2F;ApelegHQ&#x2F;ts-cms-ep-sfx" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;ApelegHQ&#x2F;ts-cms-ep-sfx</a>
  • dang33 minutes ago
    Added above. Thanks!
  • emurlin12 hours ago
    Correct