<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Chuan Hu</title>
    <description>The latest articles on DEV Community by Chuan Hu (@xxxiii).</description>
    <link>https://dev.to/xxxiii</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3902760%2F61c82cd2-b24d-4962-99f8-b92b6720b94f.png</url>
      <title>DEV Community: Chuan Hu</title>
      <link>https://dev.to/xxxiii</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/xxxiii"/>
    <language>en</language>
    <item>
      <title>I tried to build a “trustless” file sharing app (browser-only)</title>
      <dc:creator>Chuan Hu</dc:creator>
      <pubDate>Tue, 28 Apr 2026 16:09:04 +0000</pubDate>
      <link>https://dev.to/xxxiii/i-tried-to-build-a-trustless-file-sharing-app-browser-only-jc4</link>
      <guid>https://dev.to/xxxiii/i-tried-to-build-a-trustless-file-sharing-app-browser-only-jc4</guid>
      <description>&lt;p&gt;I tried to build a “trustless” file sharing app (browser-only)&lt;/p&gt;

&lt;p&gt;I build Figma plugins, but recently I ran into a problem:&lt;/p&gt;

&lt;p&gt;I needed to share files (PDF / PPT / assets),&lt;br&gt;
and I realized I don’t actually trust any file sharing service.&lt;/p&gt;

&lt;p&gt;Not because they’re bad — but because:&lt;/p&gt;

&lt;p&gt;they can technically read your files.&lt;/p&gt;

&lt;p&gt;So I tried something different&lt;/p&gt;

&lt;p&gt;I’m building a file sharing flow where:&lt;/p&gt;

&lt;p&gt;everything happens in the browser&lt;br&gt;
files are encrypted before upload&lt;br&gt;
server stores only opaque blobs&lt;br&gt;
the decryption key is in the URL (#key=...)&lt;/p&gt;

&lt;p&gt;Meaning:&lt;/p&gt;

&lt;p&gt;if you don’t have the link, you literally can’t read the file&lt;br&gt;
even I (the developer) can’t access it&lt;/p&gt;

&lt;p&gt;The interesting parts&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;Client-side processing is painful&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;Users upload anything:&lt;/p&gt;

&lt;p&gt;PDF / PPT / Word / images&lt;/p&gt;

&lt;p&gt;Trying to normalize formats inside the browser is way harder than expected&lt;br&gt;
(WASM helps, but still messy)&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;Encryption is the easy part&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;Web Crypto API works great.&lt;/p&gt;

&lt;p&gt;The real issues are:&lt;/p&gt;

&lt;p&gt;large files (100MB+)&lt;br&gt;
memory spikes&lt;br&gt;
blocking UI&lt;/p&gt;

&lt;p&gt;→ solution: chunking + Web Workers&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;UX is the hardest problem&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;Users don’t care about encryption.&lt;/p&gt;

&lt;p&gt;They want:&lt;/p&gt;

&lt;p&gt;drag &amp;amp; drop&lt;br&gt;
click “create link”&lt;br&gt;
done&lt;/p&gt;

&lt;p&gt;Making something secure feel this simple is the real challenge.&lt;/p&gt;

&lt;p&gt;Why I’m sharing this&lt;/p&gt;

&lt;p&gt;I’m starting to think:&lt;/p&gt;

&lt;p&gt;“trustless apps” might be a real category&lt;/p&gt;

&lt;p&gt;Where you don’t need to trust:&lt;/p&gt;

&lt;p&gt;the platform&lt;br&gt;
the backend&lt;br&gt;
even the developer&lt;/p&gt;

&lt;p&gt;Curious if anyone here has built:&lt;/p&gt;

&lt;p&gt;browser-only file processing&lt;br&gt;
large file encryption pipelines&lt;br&gt;
WASM-heavy apps&lt;/p&gt;

&lt;p&gt;Would love to hear how you handled performance.&lt;/p&gt;

</description>
      <category>webdev</category>
      <category>javascript</category>
      <category>beginners</category>
      <category>security</category>
    </item>
  </channel>
</rss>
