le-chat-php icon indicating copy to clipboard operation
le-chat-php copied to clipboard

Add end to end Encryption

Open DanWin opened this issue 1 year ago • 1 comments

When communicating, one currently has to trust the server admin, since messages are stored in plain text on the server. Adding end to end encryption with perfect forward secrecy would allow users to securely communicate, without having to trust the server admin. Given that this feature will require a browser extension, or JavaScript, it should be an opt-in feature for users so that users who do not wish to allow executing code on their end can continue using the chat without additional encryption. In that case the server side should encrypt non-encrypted incoming messages to recipients that have e2e encryption enabled, while everyone else encrypts messages in their browser before sending the message.

DanWin avatar Mar 15 '24 10:03 DanWin

When communicating, one currently has to trust the server admin, since messages are stored in plain text on the server. Adding end to end encryption with perfect forward secrecy would allow users to securely communicate, without having to trust the server admin. Given that this feature will require a browser extension, or JavaScript, it should be an opt-in feature for users so that users who do not wish to allow executing code on their end can continue using the chat without additional encryption. In that case the server side should encrypt non-encrypted incoming messages to recipients that have e2e encryption enabled, while everyone else encrypts messages in their browser before sending the message.

This is one option I don't think you need to do as people can use there own tools to encrypt the message to people maybe adding a message within the Private chat window to say something on the lines to protect them selves to use there own encryption tools, make add a little extra window section where it explain why it's important to never fully trust even the provider of the chat

rexzooly avatar Jun 23 '25 10:06 rexzooly