Show HN: Whisper.Page – Share secrets, notes, and code with someone you trust (opens in new tab)

(whisper.page)

2 pointsackatz2y ago8 comments

Hi HN,

I made an app to share secrets, notes, and code blocks with someone you trust. Some of the interesting/useful aspects of Whisper Pages are:

* Focused around Markdown * Open source * Client-side decryption with WebAssembly (the key is stored in the window location hash in the URL)

Please check it out and let me know what you think. There are tons and tons of similar apps out there, so this is not exactly revolutionary – but it was fun to try to figure it out.

Some features that I am thinking about for the future: * API * Notification when your Whisper Page has been destroyed * Permanent and/or scheduled Whisper Pages * Destroy after X number of views * Other cool things I can try with WASM

8 comments

az09mugen2y ago

There is yopass https://github.com/jhaals/yopass in the same vein

m348e9122y ago

Stupid question: If the decryption key is in the URL (which I assume it is), what's the point of decrypting client side?

ackatzOP2y ago

The whole URL with the decryption key gets sent to the user one time when it’s generated. The key is tacked on at the end after a “#” symbol like you would see in a bookmark. It’s not used by the app as a bookmark, but the value is still accessible in the browser (window.location.hash). This way, I can send users their links and their decryption keys, but I will never be able to access the keys myself.

m348e9122y ago

Right, but your server logs should see the full request (and the keys), no?

1 more reply

j / k navigate · click thread line to collapse

Show HN: Whisper.Page – Share secrets, notes, and code with someone you trust (opens in new tab)

(whisper.page)

2 pointsackatz2y ago8 comments

Whisper.Page (https://whisper.page)

Hi HN,

I made an app to share secrets, notes, and code blocks with someone you trust. Some of the interesting/useful aspects of Whisper Pages are:

* Focused around Markdown * Open source * Client-side decryption with WebAssembly (the key is stored in the window location hash in the URL)

Please check it out and let me know what you think. There are tons and tons of similar apps out there, so this is not exactly revolutionary – but it was fun to try to figure it out.

8 comments

az09mugen2y ago

There is yopass https://github.com/jhaals/yopass in the same vein

m348e9122y ago

Stupid question: If the decryption key is in the URL (which I assume it is), what's the point of decrypting client side?

ackatzOP2y ago

m348e9122y ago

Right, but your server logs should see the full request (and the keys), no?

1 more reply

j / k navigate · click thread line to collapse