# orderedItems[].object.content
#FediHood and #HolosSocial, two separate #Fediverse projects (that I maintain), can now send each other #E2EE DMs, fully over #ActivityPub.

# orderedItems[].object.attachment[].name
Screenshot of an encrypted DM conversation in Holos. A banner reads "Messages are end-to-end encrypted", and each message shows a padlock next to its timestamp.

# orderedItems[].object.attachment[].name
Screenshot of the same conversation in FediHood, showing an "Encrypted" label at the top and a padlock next to each message.

# orderedItems[].object.content
I look forward to working with @benpate, @Bonfire and @evan from the SWF on E2EE Direct Messages in Loops, Pixelfed and Sup!

They’re doing some amazing work, and it makes a lot of sense to collaborate and widen compatibility across our platforms!

#ActivityPub #E2EE

# orderedItems[].object.content
Decentralized browser-based P2P E2EE messaging.

The key detail that sets this apart from other messaging apps is the browser-based client-side cryptography philosophy.

No need to install anything. Your ID is crypto-random and so the app doesnt need to rely on any central registration system like phone numbers. Your ID is unguessable and to connect to someone, you have to explicitly share it.

WebRTC has other nuances like being to route through a shared network for secure/faster transfer.

I hope this project has reached a level i can share the following details. I've made a genuine effort towards documentation and transparancy. I dont think it'll ever be enough and so im still concerned it isnt ready to share. While im using AI throughout. This is not a vibecoded project. There is attention throughout for unit tests and formal-verification. With your feedback, id like to make improvements for clarity throughout.

This version of the app demonstrates a fairly unique approach using a browser-based, local-only and webrtc approach. I know it's impossible for any system to be the "world's most secure", but that isnt a reason to not try. By rigorously implementing an exhaustive list of security features and practices, the aim is to get as close as possible.

* [Enkrypted.Chat](https://enkrypted.chat/)

This is intended to demonstrate client-side managed secure cryptography.

* [Introducing Enkrypted Chat](https://positive-intentions.com/blog/i ntroducing-enkrypted-chat)
* [Whitepaper (work-in-progress)](https://positive-intentions.com/docs/t echnical/whitepaper/complete-whitepaper)
* [Protocol Spec (work-in-progress)](https://positive-intentions.com/docs/t echnical/whitepaper/complete-protocol-spec)
* [Roadmap](https://positive-intentions.com/docs/t echnical/p2p-messaging-technical-breakdown/)

I know ive tried to compress a lot of my journey into one post. The project above is going to be tricky to understand. Feel free to reach out for clarity on any of the details.

IMPORTANT: While this is aiming to provide a secure experience, It is [not audited or reviewed](https://www. reddit.com/r/CyberSecurityAdvi ce/comments/1su8lir/security_audit_feedback_from_radically_open/). **Shared for testing, feedback and demo purposes only.** Please use responsibly.

#Privacy #OnlinePrivacy #DataPrivacy #Infosec #CyberSecurity #OpSec #DigitalRights #AntiSurveillance #DataOwnership #E2EE #P2P #PeerToPeer #WebRTC #LocalFirst #LocalOnly #NoCloud #NoRegistration #PWA #SignalProtocol #PostQuantum #Cryptography #SecureMessaging #PrivateChat #EncryptedChat #Decentralized #OpenSource #SelfHosted #BetaTesting #FeedbackWelcome #TechDemo #ProofOfConcept #BuildInPublic #IndieDev #DevCommunity

# orderedItems[].object.ephemeral.metadata[].description
Secure P2P communication without central servers - decentralized chat, file transfer, and video calls with complete privacy and data ownership.

# orderedItems[].object.ephemeral.metadata[].ogDescription
Most messaging apps ask you to trust a company with your conversations. You sign up, hand over a phone number or email, install something new, and hope your messages stay private on someone else's servers. Enkrypted Chat takes a different path: send messages securely, with no cloud copy of your chats and no trace left on a central message store. Open a link in your browser, connect with someone you trust, and start talking—no installation, no registration, no tracking, and no ads.

# orderedItems[].object.ephemeral.metadata[].ogTitle
Introducing Enkrypted Chat | positive-intentions

# orderedItems[].object.ephemeral.metadata[].description
Secure P2P communication without central servers - decentralized chat, file transfer, and video calls with complete privacy and data ownership.

# orderedItems[].object.ephemeral.metadata[].ogDescription
Entire Enkrypted Chat whitepaper on one page for printing or saving as a single PDF.

# orderedItems[].object.ephemeral.metadata[].ogTitle
Full whitepaper (print / PDF) | positive-intentions

# orderedItems[].object.ephemeral.metadata[].description
Secure P2P communication without central servers - decentralized chat, file transfer, and video calls with complete privacy and data ownership.

# orderedItems[].object.ephemeral.metadata[].ogDescription
Entire Enkrypted Chat protocol specification on one page for printing or saving as a single PDF.

# orderedItems[].object.ephemeral.metadata[].ogTitle
Full protocol spec (print / PDF) | positive-intentions

# orderedItems[].object.ephemeral.metadata[].description
Secure P2P communication without central servers - decentralized chat, file transfer, and video calls with complete privacy and data ownership.

# orderedItems[].object.ephemeral.metadata[].ogDescription
Technical breakdown and roadmap for the P2P messaging implementation

# orderedItems[].object.ephemeral.metadata[].ogTitle
P2P Messaging Technical Breakdown | positive-intentions

# orderedItems[].object.content
FEP-0806: Simple client-side encryption

https://codeberg.org/silverpill/feps/src/branch/main/0806/fep-0806.md

The FEP now includes the recommended algorithm parameters.

I consider it finished but I don't plan to continue working on my implementation or publishing to the main FEP repository. It would be better to focus on group messaging with forward secrecy (MLS or similar).

#fep_0806 #e2ee

# orderedItems[].object.content
ArcaneChat / DeltaChat channel for you:

Debugging Memes - developer&linux memes, open source and other nerdy and tech related stuff, to join click here:

https://i.delta.chat/#B68D965B65A63BBE 7EB32D56234652E2C899213F&v=3&x=ImcSr1dp4fEWrZreS4Emlb5u&j=eX6UqJEePp9y_i-225abLctf&s=NKEuhQYd9UlzXhnW7rCTHNbF&a=57cyvwkiidqqxnryms0q%40chat.in%2Dthe.eu&n=Debugging+Memes&b=Debugging+Memes

#memes #fun #meme #channel #decentralization #encryption #e2ee #ArcaneChat #DeltaChat #linux #opensource #gnulinux #developers #development #dev

# orderedItems[].object.content
RE: https://mastodon.social/@HolosSocial/1 16937094959319831

While most of you know my main account for #Fedilab, months ago I wanted to work on something new.
Being able to publish this code in production is an important step for me.
Yes, it is possible to run an #ActivityPub server on your phone, with #E2EE DMs and a portable identity.
And you are no longer tied to a single model like text, media or video. No need for separate apps: one account does it all, and you switch in one tap. Only your device owns the data, and the rules are on your side.

# orderedItems[].object.ephemeral.metadata[].description
Today, I updated the documentation for installing a relay (Docker, manual, automatic script).
Behind the scenes, I reproduced each installation to adapt and fix the doc.
Yes, the official #HolosSocial relay is coming to production after a long 10 months of work. The #YunoHost package will come next.
Around 800 users on a relay is a small number of GB, everything is optimised, and it can run on a small VPS.
I am quite proud of this work. Thank you for making it possible with your support.

# orderedItems[].object.ephemeral.metadata[].ogDescription
Today, I updated the documentation for installing a relay (Docker, manual, automatic script).
Behind the scenes, I reproduced each installation to adapt and fix the doc.
Yes, the official #HolosSocial relay is coming to production after a long 10 months of work. The #YunoHost package will come next.
Around 800 users on a relay is a small number of GB, everything is optimised, and it can run on a small VPS.
I am quite proud of this work. Thank you for making it possible with your support.

# orderedItems[].object.content
The Long Tail of Work Left Until #ActivityPub Has #E2EE

#fediverse
https://soatok.blog/2026/07/15/the-lon g-tail-of-work-left-until-activitypub-has-e2ee/

# orderedItems[].object.ephemeral.metadata[].description
Separate from my proposal for key transparency for the Fediverse (which I've certainly blogged about a lot), the W3C has been working on building out end-to-end encryption (E2EE) for ActivityPub. The two projects are mostly being developed independent of each other, though connecting the two should be straightforward. As I prepare to tie up the…

# orderedItems[].object.ephemeral.metadata[].ogDescription
Separate from my proposal for key transparency for the Fediverse (which I’ve certainly blogged about a lot), the W3C has been working on building out end-to-end encryption (E2EE) for Activity…

# orderedItems[].object.ephemeral.metadata[].ogTitle
The Long Tail of Work Left Until ActivityPub Has E2EE - Dhole Moments

# orderedItems[].object.content
The Long Tail of Work Left Until ActivityPub Has E2EE - Dhole Moments

#activitypub #e2ee #security #fediverse

https://soatok.blog/2026/07/15/the-lon g-tail-of-work-left-until-activitypub-has-e2ee/

# orderedItems[].object.ephemeral.metadata[].description
Separate from my proposal for key transparency for the Fediverse (which I've certainly blogged about a lot), the W3C has been working on building out end-to-end encryption (E2EE) for ActivityPub. The two projects are mostly being developed independent of each other, though connecting the two should be straightforward. As I prepare to tie up the…

# orderedItems[].object.ephemeral.metadata[].ogDescription
Separate from my proposal for key transparency for the Fediverse (which I’ve certainly blogged about a lot), the W3C has been working on building out end-to-end encryption (E2EE) for Activity…

# orderedItems[].object.ephemeral.metadata[].ogTitle
The Long Tail of Work Left Until ActivityPub Has E2EE - Dhole Moments

# orderedItems[].object.content
The #W3C is working on end-to-end encryption #E2EE for #ActivityPub, with three main goals: enabling #encryptedmessages with attachments, ensuring #correctencryption, and verifying #usercontrol of signing keys. The Fundamental Goal is being addressed by the SWICG’s ActivityPub E2EE project team, while the Security Goal requires client software to authenticate KeyPackages. https://soatok.blog/2026/07/15/the-lon g-tail-of-work-left-until-activitypub-has-e2ee/?Fedizen.EU #Fedizen #Fediverse #ActivityPub #News

# orderedItems[].object.ephemeral.metadata[].description
Separate from my proposal for key transparency for the Fediverse (which I've certainly blogged about a lot), the W3C has been working on building out end-to-end encryption (E2EE) for ActivityPub. The two projects are mostly being developed independent of each other, though connecting the two should be straightforward. As I prepare to tie up the…

# orderedItems[].object.ephemeral.metadata[].ogDescription
Separate from my proposal for key transparency for the Fediverse (which I’ve certainly blogged about a lot), the W3C has been working on building out end-to-end encryption (E2EE) for Activity…

# orderedItems[].object.ephemeral.metadata[].ogTitle
The Long Tail of Work Left Until ActivityPub Has E2EE - Dhole Moments

# orderedItems[].object.content
Its great to have @soatok
digging deep into the #E2EE project and clearing a path for everyone to get involved.

Thank you!

https://soatok.blog/2026/07/15/the-lon g-tail-of-work-left-until-activitypub-has-e2ee/

# orderedItems[].object.ephemeral.metadata[].description
Separate from my proposal for key transparency for the Fediverse (which I've certainly blogged about a lot), the W3C has been working on building out end-to-end encryption (E2EE) for ActivityPub. The two projects are mostly being developed independent of each other, though connecting the two should be straightforward. As I prepare to tie up the…

# orderedItems[].object.ephemeral.metadata[].ogDescription
Separate from my proposal for key transparency for the Fediverse (which I’ve certainly blogged about a lot), the W3C has been working on building out end-to-end encryption (E2EE) for Activity…

# orderedItems[].object.ephemeral.metadata[].ogTitle
The Long Tail of Work Left Until ActivityPub Has E2EE - Dhole Moments

# orderedItems[].object.content
#HolosSocial lets you run your own #ActivityPub server on your device. The goal is to let everyone using AP with a phone or a computer reach full independence, through custom domains and by hosting your media on your own cloud.
This is not a hack of AP (as I have read), everything stays within the spec. The project simply lets you be fully independent. You can reach full independence step by step. And #E2EE DMs already work through AP.

Don't hesitate to join: https://holos.social

# orderedItems[].object.ephemeral.metadata[].ogDescription
Your device is your fediverse server. End-to-end encrypted DMs, multi-device sync, custom domains. Powered by ActivityPub.

# orderedItems[].object.ephemeral.metadata[].ogTitle
Fediverse Relay - Your Device is Your Fediverse Server

# orderedItems[].object.content
I kept on thinking about how #e2ee #email over #activitypub would look like only to realise that to solve the problem of server side MITM on TOFU, I needed a central way of looking up actors not tied to the server, and before I knew it I was reinventing #atproto(ik y'all don't like it, sorry, it's the only way identity TOFU won't have an MITM problem)

# orderedItems[].object.content
a thought popped up in my head:

why don't we just find a way to #xmpp our way in the #fediverse instead for #e2ee encryption?

i find it unnecessary to create another protocol, especially when there is already a federated option like that.

open for comments.

# orderedItems[].object.content
When I asked about #e2ee on #ActivityPub, I'd meant for social media posts, not for direct messages.

It sounds like that is a harder problem?

#socialmedia

# orderedItems[].object.content
Can someone update me on the state / existence of #ActivityPub platforms with end-to-end encryption?

Does such platforms exist? If so, what are they, and do any of them natively use e2ee by default

#e2e #e2ee #socialmedia

# orderedItems[].object.content
The desktop interface of #HolosSocial will be quite simple and #E2EE already works great.

# orderedItems[].object.attachment[].name
Screenshot of the Holos desktop interface showing an end-to-end encrypted conversation, with a navigation sidebar on the left and a trending hashtags panel on the right.

# orderedItems[].object.content
Centralized platforms will never be the solution for privacy and autonomy, it is crazy but all that multi-millions-dollar backed apps can't bring you as far in terms of autonomy, resilience and freedom as #ArcaneChat does

if you are not using #Android, you could instead use #DeltaChat or any other #chatmail client, they are all interoperable, see https://chatmail.at

#decentralization #autonomy #digitalindependence #european #europe #openSource #security #privacy #e2ee #diday #resilience

# orderedItems[].object.ephemeral.metadata[].description
Chatmail provides FOSS infrastructure  for interoperable, secure, speedy and reliable end-to-end encrypted messaging. Check out clients as Arcane Chat, Bots or Delta Chat today!

# orderedItems[].object.ephemeral.metadata[].ogDescription
Chatmail provides FOSS infrastructure  for interoperable, secure, speedy and reliable end-to-end encrypted messaging. Check out clients as Arcane Chat, Bots or Delta Chat today!

# orderedItems[].object.content
Meta’s confusing new approach to chat privacy https://www. malwarebytes.com/blog/news/202 6/05/metas-confusing-new-approach-to-chat-privacy #Instagram #whatsapp #Privacy #News #E2EE #Meta #AI

# orderedItems[].object.ephemeral.metadata[].twitterTitle
Meta’s confusing new approach to chat privacy

# orderedItems[].object.ephemeral.metadata[].description
WhatsApp now offers disappearing AI chats Meta says it cannot read. While Instagram just removed the feature that stopped Meta reading your messages.

# orderedItems[].object.ephemeral.metadata[].ogDescription
WhatsApp now offers disappearing AI chats Meta says it cannot read. While Instagram just removed the feature that stopped Meta reading your messages.

# orderedItems[].object.ephemeral.metadata[].ogTitle
Meta’s confusing new approach to chat privacy

# orderedItems[].object.ephemeral.metadata[].twitterDescription
WhatsApp now offers disappearing AI chats Meta says it cannot read. While Instagram just removed the feature that stopped Meta reading your messages.

# orderedItems[].object.content
Signal is developing a standalone desktop app without requiring a smartphone for setup or use, based on recent open-source code changes. 🖥️
The update adds more desktop controls while keeping end-to-end encryption, improving device independence with a privacy-first design. 🔐

@signalapp

🔗 https://aboutsignal.com/news/signal-de sktop-without-a-mobile-phone-standalone-version-in-development/

#TechNews #Signal #Messaging #Privacy #E2EE #Encryption #EndToEndEncryption #OpenSource #FOSS #Cybersecurity #Security #Data #Internet #Freedom #Software #Tech #Communication

# orderedItems[].object.content
With the political changes of
the coming years, we might need to rely more and more on tools that provide us the privacy and security we need to stay safe.

One of these tool that is and will likely become increasingly essential to our communities is Signal :signal: 💙

But @signalapp is a nonprofit organization
and, to survive, it will need our support. Especially with the continuing battle to protect end-to-end encryption ✊🔒

If you can afford it,
I highly encourage you to support Signal financially.

HOW TO ❓

1. From mobile: You can donate monthly and even get a cute donor badge in the app! On iOS, click on your name on the upper left, then "Settings", then "Donate to Signal" :awesome:

2. From browser: You can setup a monthly or one-time donation, even a small amount helps: https://signal.org/donate/ :blobcatheart:

3. IRL: Buy swag! You can also buy cool swag to help financially while spreading the good word about Signal while wearing it! Check out Signal's store: https://shop.signal.org 👕✨

Thank you for supporting the tools that help us all 💙

#Privacy #Signal #Encryption #E2EE #NonProfit #DigitalRights