Hey guys,
I built as title says E2EE chat platform https://chat.markero.eu and its public source sits at https://git.markero.eu/main/markero-chat - feel free to fork it, clone it, break it, send PRs.
Project took 4 months to mature with breaks. It includes android AAB project files if you wish to submit it to Play store. Firebase is integrated.
Not going to lie - On AI: I used it as coding assistant. Every change was reviewed and tested - there are 84 backend + 13 WebSocket + 6 crypto tests in the repo (./tests/run-all.sh).
What I'm looking for:
Holes in the threat model: chat.markero.eu/security - what's misleading, missing?
Code review - especially the key-wrapping and message-encryption paths.
UX/UI feedback from actually using it.
- I'm not claiming to beat Signal - the trade-off here is different.
- Let me know what you think, not looking for promotion but as independent project looking for holes and how to solve them, criticism accepted, but would rather want a comment on how to improve it.
Where I'm not claiming victory - Signal is excellent. I'm not trying to beat it, the trade off is different.
If you find a vulnerability, please report it privately, or make PR request.
Thank you guys and girls for reading this! It means a lot!
P.S- It will probably get a lot of hate, but I'm ready to improve it. People can host it themselves and have secure chats with they guys, we are not beating Telegram/Signal we are standing belong them. Thanks again!
Top comments (1)