hn.today

Show HN: Air-gapped file encryption as self-decrypting HTML page

cms-sfx-demo.apeleg.com32 points13 comments
Screenshot of Show HN: Air-gapped file encryption as self-decrypting HTML page

Commenters reacted to an air-gapped, self-decrypting HTML file idea with curiosity and feature requests. som suggested adding public-key encryption so recipients wouldn't need a side-channel password; lukan asked whether “air-gapped” simply meant no internet; firefax joked about JavaScript being required to vote. FatalLogic linked to a possible repository, and emurlin, who described being inspired by self-extracting archives, explained the project's goals: zero-install use via a single HTML file, self-decryption without network access, and full auditability. emurlin said the design uses reproducible builds and embedded OpenPGP signatures, manipulates HTML so decryption doesn't break the signature, and can even decrypt with bare OpenSSL, though some behavior depends on the OS.

Others flagged prior art and practical concerns. 112233 and jszymborski pointed to earlier implementations such as SecurePage and even a 2006 patent, arguing the concept predates this work. dang said they planned to move the description to the top and repost it. Overall, some commenters praised the convenience and auditable approach as innovative, while others emphasized historical precedents and suggested concrete improvements like public-key support, revealing a split between enthusiasm for the implementation and reminders of existing solutions and desired features.

Read on cms-sfx-demo.apeleg.com13 comments on Hacker News

Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.

More in Security

The daily digest

Today's best Hacker News stories, summarized and screenshotted, one email a day.