SecureBitChat/securebit-chat
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Commit Graph

  • 6a98e2eb00 fix(mobile): make the chat layout responsive on phones; release v5.9.2 main lockbitchat 2026-08-09 13:21:44 -04:00
  • 556727eb6f fix(qr): accept a one-frame invitation; release v5.9.1 lockbitchat 2026-08-06 23:32:20 -04:00
  • 808fd99b73 docs: describe the minimal invitation and where its security comes from lockbitchat 2026-08-06 18:53:51 -04:00
  • 32b642f0e6 docs: record SBQ2 phases 2 and 3 as shipped in v5.9.0 lockbitchat 2026-08-06 18:42:40 -04:00
  • 5f22b7dab5 feat(handshake): shrink the connection exchange; release v5.9.0 lockbitchat 2026-08-06 18:20:48 -04:00
  • fb959d7ca7 fix(descriptor): rebuild SDP that Firefox accepts; release v5.8.1 lockbitchat 2026-08-06 17:25:46 -04:00
  • 6e82cfcae2 feat(descriptor): SBQ2 connection descriptor format; release v5.8.0 lockbitchat 2026-08-06 11:54:05 -04:00
  • 3212138a0d docs: reorganise documentation; derive header version from package.json; release v5.7.2 lockbitchat 2026-08-05 23:54:50 -04:00
  • 27279ae7c6 feat(crypto): Double Ratchet forward secrecy; hardening pass; release v5.7.1 lockbitchat 2026-08-05 23:02:20 -04:00
  • 2a7142c722 feat(webrtc): recover a dropped connection without a signalling server; release v5.6.0 lockbitchat 2026-08-02 21:16:13 -04:00
  • 60bf037ef9 Fix the desktop download buttons; release v5.5.4 lockbitchat 2026-07-27 04:53:44 -04:00
  • fcee4216e8 Point desktop downloads at 0.3.0; release v5.5.3 lockbitchat 2026-07-27 04:35:12 -04:00
  • 6152a77b51 security: fix SAS verification bypass and unauthenticated frame injection; release v5.5.2 lockbitchat 2026-07-27 00:10:29 -04:00
  • b3fcf54670 feat(webrtc): end-to-end encrypted voice & video calls with adaptive codecs lockbitchat 2026-07-23 12:43:06 -04:00
  • 0de8ab2d54 Replace free TURN with self-hosted coturn; fix Safari connectivity; release v5.4.10 lockbitchat 2026-07-22 18:10:17 -04:00
  • c98a01b1d5 Add end-to-end encrypted voice messages; release v5.4.5 lockbitchat 2026-07-22 00:41:58 -04:00
  • 0e3e3a2974 Add multiple-session support: run several independent encrypted chats at once lockbitchat 2026-06-26 00:00:13 -04:00
  • db5d6e481d seo: update page title to "SecureBit.chat — Private, Encrypted Messenger" lockbitchat 2026-06-24 16:17:35 -04:00
  • ef2f13d053 seo: refine social card — SVG mark, more spacing, cache-busting filename lockbitchat 2026-06-24 16:13:39 -04:00
  • 62567fb5cc seo: rework title/description, add structured data, refine social card lockbitchat 2026-06-24 16:06:37 -04:00
  • ae6900d0c7 seo: add social preview image and fix Open Graph / Twitter meta lockbitchat 2026-06-24 15:57:41 -04:00
  • 5eaf57c8da Fix formatting for Privacy by design section in README Volodymyr 2026-06-24 15:44:54 -04:00
  • ab49d7485d Fix formatting and headings in README.mdfix Volodymyr 2026-06-24 15:43:16 -04:00
  • 96fffab765 release: v4.9.1 — redesigned QR scanner, UI fixes, README overhaul lockbitchat 2026-06-24 15:41:15 -04:00
  • cbf5c5f834 release: v4.9.0 — full redesign + reworked offline mode lockbitchat 2026-06-23 16:52:30 -04:00
  • b39f9ecd2c release: v4.8.20 secure chat tools — completed, fixed and polished lockbitchat 2026-06-19 02:58:03 -04:00
  • cb72b9cb1c fix: chat not opening after SAS in v4.8.14 (nowTick scope) — v4.8.15 lockbitchat 2026-06-18 21:15:43 -04:00
  • 15173a9278 release: v4.8.14 secure chat tools (code blocks, view-once, disappearing, unsend, panic) lockbitchat 2026-06-18 20:37:50 -04:00
  • cf36656341 release: v4.8.13 message integrity & transport hardening lockbitchat 2026-06-18 17:08:59 -04:00
  • 42be55aaeb fix(security): restore outgoing message integrity, add HSTS/Permissions-Policy lockbitchat 2026-06-18 16:48:29 -04:00
  • 6f36fce8c6 release: v4.8.12 chat notification & file-transfer UI fixes lockbitchat 2026-06-17 17:51:09 -04:00
  • be1d02f1f7 release: v4.8.11 file transfer reliability fix lockbitchat 2026-06-16 18:24:29 -04:00
  • 9244250835 ux(ice-test): clarify result when browser hides reflexive/relay candidates (Safari) lockbitchat 2026-06-16 01:50:40 -04:00
  • 6dac4ce52a fix(csp): allow stun:/turn: schemes in connect-src lockbitchat 2026-06-16 01:09:02 -04:00
  • 017a590220 fix(deploy): 404 missing assets instead of HTML fallback; ship public STUN config lockbitchat 2026-06-15 16:30:39 -04:00
  • d58967c671 build: add Fly.io deployment (nginx static serving) lockbitchat 2026-06-15 16:23:14 -04:00
  • 39aad6ae8b release: v4.8.10 user-configurable STUN/TURN servers lockbitchat 2026-06-15 16:05:31 -04:00
  • 7f2ecce57f feat: user-configurable STUN/TURN servers (advanced network settings) lockbitchat 2026-06-15 15:39:13 -04:00
  • 366f080128 release: v4.8.9 security hardening patch lockbitchat 2026-06-15 15:08:03 -04:00
  • d11f250257 release: v4.8.8 file transfer consent fix lockbitchat 2026-05-26 22:40:36 -04:00
  • 2468cb495e release: v4.8.7 WebRTC join reliability patch lockbitchat 2026-05-19 09:49:22 -04:00
  • 1cc873223a fix: stabilize manual WebRTC join flow lockbitchat 2026-05-18 19:49:57 -04:00
  • 01cb25f988 release: v4.8.6 security hardening patch lockbitchat 2026-05-17 23:30:41 -04:00
  • ad3bee5f2e fix: enforce service worker cache allowlist lockbitchat 2026-05-17 23:22:46 -04:00
  • f2a4276b31 fix: remove untracked disconnect timer lockbitchat 2026-05-17 23:16:14 -04:00
  • 86a96b0121 fix: harden service worker cache policy lockbitchat 2026-05-17 23:13:06 -04:00
  • 33f3764ec5 fix: synchronize WebRTC privacy mode state lockbitchat 2026-05-17 23:09:45 -04:00
  • a04a70eb97 fix: throttle inbound file chunks lockbitchat 2026-05-17 23:05:43 -04:00
  • 0fbcc240be fix: add inbound message rate limiting lockbitchat 2026-05-17 23:01:58 -04:00
  • 18022c6b68 fix: gate debug window hooks behind explicit flag lockbitchat 2026-05-17 22:58:21 -04:00
  • 026c81b775 chore: stop tracking node_modules lockbitchat 2026-05-17 18:03:10 -04:00
  • f71ff62417 fix: make WebRTC privacy mode explicit lockbitchat 2026-05-17 17:57:11 -04:00
  • ce48e8a851 fix: harden chat sanitization with DOMPurify lockbitchat 2026-05-17 17:52:36 -04:00
  • cc7f850e7d fix: bind SAS verification to DTLS fingerprint strings lockbitchat 2026-05-17 17:46:15 -04:00
  • 0a42aa13c3 release: prepare v4.8.5 security hardening release lockbitchat 2026-05-17 14:48:52 -04:00
  • 4b8c8829f1 Fix CSP errors, MIME types, and Service Worker issues lockbitchat 2026-01-06 23:01:32 -04:00
  • ebcf2dcaac New component with partner logos lockbitchat 2025-12-30 04:16:41 -04:00
  • f136d0db3d Update macOS download link and bump version to 4.7.56 lockbitchat 2025-12-30 01:34:51 -04:00
  • 91c292a6cf feat: implement comprehensive PWA force update system lockbitchat 2025-12-29 10:51:07 -04:00
  • 1b6431a36b Merge branch 'main' of https://github.com/SecureBitChat/securebit-chat lockbitchat 2025-12-28 20:30:12 -04:00
  • ee635da66f docs: Update README to v4.7.53 with Desktop Edition and roadmap updates lockbitchat 2025-12-28 20:28:22 -04:00
  • 92907732bf Add Shared Security Core information to README Volodymyr 2025-12-23 13:59:24 -04:00
  • 968fff9c61 Project Update: Transition to Desktop & Mobile Versions lockbitchat 2025-11-04 14:14:30 -04:00
  • 79c8d08782 fix: prevent encryption key loss and IndexedDB connection errors lockbitchat 2025-11-04 13:14:24 -04:00
  • 207e51361c security: increase PBKDF2 iterations from 100,000 → 310,000 (OWASP 2025 compliance) lockbitchat 2025-10-30 15:24:09 -04:00
  • 4583db39a2 feat(security): switch master key to non-extractable CryptoKey handle and remove direct access lockbitchat 2025-10-30 15:16:36 -04:00
  • 77ed4b3e4f remove key/hash logging and debug output from EnhancedSecureWebRTCManager and EnhancedSecureCryptoUtils lockbitchat 2025-10-30 14:55:46 -04:00
  • c7b16157fc Enhanced HKDF-based key derivation with improved security features - Implemented proper RFC 5869 compliant HKDF key derivation process - Added Perfect Forward Secrecy (PFS) key for enhanced session security - Improved key separation using unique info parameters for each derived key - Enhanced salt size from 32 to 64 bytes for increased entropy - Added comprehensive key validation and error handling - Implemented proper ECDH + HKDF integration following Web Crypto API best practices - Added metadata encryption key for enhanced data protection - Improved compatibility with modern cryptographic standards (RFC 7748, NIST SP 800-56A) -Enhanced logging and debugging capabilities for cryptographic operations - Maintained backward compatibility while upgrading security infrastructure Security improvements: - Cryptographic isolation between different key purposes - Enhanced protection against cross-key attacks - Improved resistance to future key compromise scenarios - Better compliance with OWASP cryptographic storage guidelines Technical details: - Refactored deriveSharedKeys() method for proper HKDF implementation - Updated WebRTC manager to use new messageKey API - Added comprehensive error handling and validation - Improved browser compatibility with standardized cryptographic operations - This update strengthens the existing security foundation with modern cryptographic practices while maintaining full system compatibility. lockbitchat 2025-10-27 15:18:15 -04:00
  • 3c2bac588c ci: switch mirror workflow to HTTPS token authentication lockbitchat 2025-10-20 12:51:27 -04:00
  • 2ae65eb749 ci: switch mirror workflow to HTTPS token authentication lockbitchat 2025-10-20 12:44:59 -04:00
  • 4a3249b2a6 test lockbitchat 2025-10-20 12:39:55 -04:00
  • 456545f055 Add GitHub Actions workflow to mirror repository to PrivacyGuides lockbitchat 2025-10-20 12:34:10 -04:00
  • 40381cc0a1 Increase session timeout to 60min and inactivity to 30min Fix sendMessage isUnlocked check to prevent immediate lock Move session extension logic to SecureMasterKeyManager Improve error messages Keep validation of crypto keys before encryption lockbitchat 2025-10-20 02:06:42 -04:00
  • 0d7835cfa2 fix: resolve incomplete multi-character sanitization in sanitizeMessage lockbitchat 2025-10-20 01:20:02 -04:00
  • 7604381584 fix: eliminate division on crypto random in getSafeRandomFloat lockbitchat 2025-10-20 01:10:25 -04:00
  • a7a5861e0a fix: replace modulo with bitwise mask in crypto random lockbitchat 2025-10-20 01:02:07 -04:00
  • 63a19e6a4c fix: resolve CodeQL biased crypto random warning lockbitchat 2025-10-20 00:51:03 -04:00
  • b18e943abd Fix cryptographic random bias in fingerprint mask generation lockbitchat 2025-10-20 00:42:12 -04:00
  • 9c1258cd1e Fix cryptographic random bias in fingerprint mask generation lockbitchat 2025-10-20 00:42:03 -04:00
  • 60e4bb6b8a Fix cryptographic random bias in getUnbiasedRandomInRange lockbitchat 2025-10-20 00:34:17 -04:00
  • 4233ba3d7e Fix cryptographic random bias (CodeQL js/biased-cryptographic-random) lockbitchat 2025-10-20 00:25:50 -04:00
  • 333c4b87b5 fix: improve sanitization to prevent XSS lockbitchat 2025-10-19 23:55:41 -04:00
  • 5096a09811 fix: improve sanitization to prevent XSS lockbitchat 2025-10-19 23:54:26 -04:00
  • 5c658cdd6c Security updates for CodeQL lockbitchat 2025-10-19 23:39:14 -04:00
  • e209d3e6f5 fix: improve sanitization to prevent XSS lockbitchat 2025-10-19 23:23:58 -04:00
  • 49e5a054cb fix: security and build improvements lockbitchat 2025-10-19 23:05:24 -04:00
  • 9d0372484a Add CodeQL security scanning workflow lockbitchat 2025-10-19 22:08:31 -04:00
  • 69fa5ffc28 Add CodeQL security scanning workflow lockbitchat 2025-10-19 22:04:07 -04:00
  • ed169b4c8c Add CodeQL security scanning workflow lockbitchat 2025-10-19 22:02:28 -04:00
  • 906562333e fix(ios): prevent chat crash when Notifications API is unavailable on iPhones - Guarded all Notification API usage to avoid ReferenceError on iOS Safari. - Set default permission to 'denied' when Notification is undefined. - Added early return in notification flow when Notifications API is unavailable. - Wrapped Notification.permission, requestPermission(), and new Notification(...) with typeof checks. - Updated SecureNotificationManager and app.jsx to degrade gracefully. - Verified build passes and chat loads correctly on iOS without notifications. lockbitchat 2025-10-19 20:51:44 -04:00
  • 4e7f5867b5 feat: implement automatic key generation on channel creation lockbitchat 2025-10-19 15:23:02 -04:00
  • 5ddfd1f5b3 fix(ios): prevent chat crash when Notifications API is unavailable on iPhones lockbitchat 2025-10-17 03:49:33 -04:00
  • 1acbc12a92 update version to v4.4.18 lockbitchat 2025-10-15 20:23:50 -04:00
  • 3ed8766fc9 v4.3.120 update lockbitchat 2025-10-15 20:15:41 -04:00
  • b087adfecc feat: implement secure browser notifications system lockbitchat 2025-10-15 19:58:28 -04:00
  • 5b5cc67fdc Push to Codeberg lockbitchat 2025-10-15 04:55:22 -04:00
  • 93e4b7ad19 test lockbitchat 2025-10-15 04:51:48 -04:00
  • fce18d27a5 Push to PrivacyGuides lockbitchat 2025-10-15 04:41:05 -04:00
  • 03e06f59dc Push to Codeberg lockbitchat 2025-10-15 04:30:18 -04:00
  • 5df6cb0d16 test ssh lockbitchat 2025-10-15 04:25:49 -04:00