Skip to content

Android iMessage Relay v0.1.0

Choose a tag to compare

View all tags
@ParryQiu ParryQiu released this 21 Aug 04:03
· 15 commits to main since this release
v0.1.0
18aecbd
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Initial public release

Android iMessage Relay forwards encrypted Android SMS messages through Cloudflare Tunnel and Zero Trust Access to a trusted Mac, which delivers them with Apple Messages.

Highlights

  • Fail-closed Android client with no built-in endpoint, credentials, recipient, or deployment key.
  • Local proof-of-possession pairing and explicit Mac approval.
  • End-to-end encrypted and device-signed message envelopes.
  • Bounded encrypted Android queue and bounded Mac delivery metadata.
  • Cloudflare Tunnel and Service Auth Terraform templates.
  • Local macOS Keychain recipient storage and short-lived FIFO delivery.

Install

  1. Download the APK, checksum, certificate fingerprint, and SBOM from this release.
  2. Verify the APK with the supplied SHA-256 checksum and certificate fingerprint.
  3. Install the APK on Android 8.0 or newer.
  4. Follow the README for Mac relay installation, Cloudflare Access and Tunnel setup, and local pairing approval.

Upgrade and rollback

This is the first public release. For migration from an existing relay, follow docs/migration.md, keep the previous APK and Mac service available, and revoke SMS permission from the old Android app before enabling the new one to prevent duplicate forwarding.

Validation scope

The exact release commit passed Android tests and lint, Mac tests, Terraform validation, CodeQL, dependency review, and secret scanning. The APK was built locally, signed with the published certificate fingerprint, and verified with Android build tools.

This packaging release does not claim a completed physical-device, real-SMS, or 24-hour end-to-end stability test. Operators should complete the README acceptance checklist before relying on it for production use.

Known limitations

  • SMS only; MMS images and third-party application notifications are not supported.
  • A Mac signed into Apple Messages must remain logged in and awake.
  • Cloudflare can observe required transport metadata but cannot decrypt SMS bodies.
  • Android vendor background restrictions may require autostart and battery-optimization exemptions.
  • This is an independent open-source project and is not affiliated with Apple or Cloudflare.
Assets 6
Loading