elm.chat v0.1.0 — disposable encrypted rooms
elm.chat v0.1.0 — disposable encrypted rooms
The first tagged release of elm.chat: an open-source web app for creating a
temporary room, sharing a single-use invite, having one conversation, and
destroying the room when it is finished.
Included
- Browser-side encryption for messages and files
- Single-use and revocable room invitations
- Manual and timed room destruction
- No accounts or contact lists
- No server-side transcript or file persistence
- One Durable Object per live room on Cloudflare
- One-click Deploy to Cloudflare path
- Public architecture and threat-model documentation
- AGPL-3.0 source
Try or deploy it
- Live app: https://elm.chat
- Architecture walkthrough: https://elm.chat/building-ephemeral-chat-cloudflare
- Self-destructing chat guide: https://elm.chat/self-destructing-chat
- Credential handoff guide: https://elm.chat/send-a-password-securely
- Deployment guide: https://github.com/shawnbure/elm-chat#deploy-to-cloudflare
- Threat model: https://github.com/shawnbure/elm-chat/blob/main/docs/threat-model.md
Security status
This release has not had an independent security audit. The threat model
documents current limits, including relay-visible timing, sizes, and presence.
Use the project as early-stage software and review the threat model before
relying on it for a sensitive use case.
Feedback on the invite model, browser key handling, abuse controls, mobile UX,
and self-hosting path is especially welcome.