v0.1.2

Mesh-Talk v0.1.2

Serverless, end-to-end-encrypted LAN messenger (Rust + Tauri 2 + React). No server and no
sign-up — peers on the same local network discover each other over signed broadcasts and chat
directly with forward secrecy. Includes 1:1 DMs, group channels, file sharing, reactions,
replies, @mentions, search, and multi-device.

Downloads

Pick the zip for your platform. Each zip contains the installer(s) plus a SHA256SUMS
file, and ships alongside a cosign signature (.zip.bundle) and a SLSA build-provenance
attestation. A CycloneDX SBOM (mesh-talk.cdx.json) is attached to the release.

Platform	Asset
macOS (Apple Silicon)	mesh-talk_v0.1.2_macos_arm64.zip
macOS (Intel)	mesh-talk_v0.1.2_macos_x86_64.zip
Windows (x64)	mesh-talk_v0.1.2_windows_x86_64.zip
Linux (x64)	mesh-talk_v0.1.2_linux_x86_64.zip

Verifying your download

These builds are not signed by a commercial CA (free distribution), but every artifact is
independently verifiable. Replace <os>_<arch> with your platform (e.g. macos_arm64).

1. Checksum — unzip, then in the extracted folder:

• macOS / Linux: shasum -a 256 -c SHA256SUMS
• Windows (PowerShell): Get-FileHash .\<file> -Algorithm SHA256 and compare to SHA256SUMS

2. Cosign signature (Sigstore keyless — proves the zip is the one CI produced):

cosign verify-blob \
  --bundle mesh-talk_v0.1.2_<os>_<arch>.zip.bundle \
  --certificate-identity-regexp 'https://github.com/OctopusGarage/mesh-talk/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  mesh-talk_v0.1.2_<os>_<arch>.zip

3. SLSA build provenance (proves it was built by this repo's CI from tag v0.1.2):

gh attestation verify mesh-talk_v0.1.2_<os>_<arch>.zip --repo OctopusGarage/mesh-talk

4. SBOM — mesh-talk.cdx.json is the full CycloneDX dependency inventory for auditing.

First run (unsigned app)

• macOS: right-click the app → Open (first time only). If it's blocked as "damaged",
  clear the quarantine flag. Use the full path /usr/bin/xattr — a Homebrew or Conda xattr
  earlier in your PATH can shadow the system one and won't accept -r:
  /usr/bin/xattr -dr com.apple.quarantine /Applications/mesh-talk.app
• Windows: SmartScreen → More info → Run anyway.
• Linux: chmod +x *.AppImage and run it, or install the .deb / .rpm.

Using it

Launch the app and register a username + password — your keys are generated and stored
encrypted on-device (PBKDF2 + AES-GCM); there is no central account. Other people running
Mesh-Talk on the same LAN appear automatically; click a peer to start chatting.

For offline delivery (so peers still receive messages when you're not both online), run the
headless relay on an always-on machine:

mesh-talk-node --post-office

The post office only ever stores ciphertext — it cannot read messages.

Full documentation: README ·
ARCHITECTURE ·
SECURITY

Full Changelog: v0.1.0...v0.1.2