Releases: shawnbure/elm-chat
Release list
elm.chat v0.1.1 — clearer boundaries, easier continuation
elm.chat v0.1.1 — clearer boundaries, easier continuation
This release makes elm.chat's early-stage security status easier to inspect and
improves the path from joining a room to creating another one.
What changed
- Published a central security status and limitations
page and an independent-review request. - Changed the invited-participant “make your own” action to open a new tab, so
it no longer disconnects the active room. - Added a press kit, practical temporary-handoff
guides, public-interest and technical articles, structured metadata, and a
12-entry RSS feed. - Added a repository changelog
and clearer contributor and self-hosting routes.
Try, inspect, or deploy
- Live app: https://elm.chat
- Source: https://github.com/shawnbure/elm-chat
- Architecture: https://elm.chat/building-ephemeral-chat-cloudflare
- Security status: https://elm.chat/security-and-limitations
- One-click Cloudflare deployment: https://github.com/shawnbure/elm-chat#run-your-own-in-one-click
Security status
elm.chat has not completed an independent security audit. Message
authentication and replay/duplicate protection remain unfinished. The
Cloudflare relay can observe ordinary connection metadata, and participants or
compromised devices can retain message or file copies. This release is not an
anonymity system, high-risk source channel, compliance product, or
production-ready financial communications system.
elm.chat v0.1.0 — disposable encrypted rooms
elm.chat v0.1.0 — disposable encrypted rooms
The first tagged release of elm.chat: an open-source web app for creating a
temporary room, sharing a single-use invite, having one conversation, and
destroying the room when it is finished.
Included
- Browser-side encryption for messages and files
- Single-use and revocable room invitations
- Manual and timed room destruction
- No accounts or contact lists
- No server-side transcript or file persistence
- One Durable Object per live room on Cloudflare
- One-click Deploy to Cloudflare path
- Public architecture and threat-model documentation
- AGPL-3.0 source
Try or deploy it
- Live app: https://elm.chat
- Architecture walkthrough: https://elm.chat/building-ephemeral-chat-cloudflare
- Self-destructing chat guide: https://elm.chat/self-destructing-chat
- Credential handoff guide: https://elm.chat/send-a-password-securely
- Deployment guide: https://github.com/shawnbure/elm-chat#deploy-to-cloudflare
- Threat model: https://github.com/shawnbure/elm-chat/blob/main/docs/threat-model.md
Security status
This release has not had an independent security audit. The threat model
documents current limits, including relay-visible timing, sizes, and presence.
Use the project as early-stage software and review the threat model before
relying on it for a sensitive use case.
Feedback on the invite model, browser key handling, abuse controls, mobile UX,
and self-hosting path is especially welcome.