The key insight: browsers never send the URL fragment (#...) to the
server in HTTP requests. So the decryption key exists only on the
clients — the server is mathematically unable to read any message.
Features
- Real-time sync via WebSockets
- Syntax highlighting for 190+ languages (auto-detected)
- Encrypted voice notes (MediaRecorder API)
- File sharing up to 5MB
- Password-protected rooms (PBKDF2 key derivation)
- QR code room joining
- Anti-spam with escalating mute system
- Built-in admin dashboard
- Gzip compression for bandwidth optimization
Try It
- Live: shareli.online
The whole thing is open source. PRs welcome.
What would you change about this architecture? Drop a comment 👇






Top comments (0)