Files
securebit-chat/doc
lockbitchat 98d42ac2fb
CodeQL Analysis / Analyze CodeQL (push) Canceled after 0s
Deploy Application / deploy (push) Canceled after 0s
Mirror to Codeberg / mirror (push) Canceled after 0s
Mirror to PrivacyGuides / mirror (push) Canceled after 0s
feat(i18n): nine languages, each at its own address; release v6.3.0
The site now speaks German, French, Spanish, Ukrainian, Russian, Chinese,
Korean and Hindi alongside English — 623 strings per language, 5,607
translations, covering the landing page, the key exchange, the chat, group
calls and every error along the way.

Each locale is a real page at a real URL (/de/, /fr/, …), generated at build
time from locales/*.json. That is the whole point: the app is client-rendered,
so a language that only swaps strings at runtime has no address for a crawler
to index and no link anyone can share. Each page carries its own canonical, a
reciprocal hreflang cluster and translated schema.org.

The URL decides the language, always. A stored preference only applies where
the address does not say, and nothing ever redirects on Accept-Language —
that is how sites become invisible to search engines outside one country.

robots.txt and sitemap.xml did not exist before; both are generated now.

Bugs found on the way, each with a test that would have caught it:
  - partner logos used page-relative paths and 404'd from any /xx/ page
  - post-build stamped ?v= only into the root shell, leaving locales behind
  - "Back online" appeared on every page load, not just after being offline
  - update timestamps were hard-coded to US format for every reader
  - t() threw on a partial window, taking whole components down with it
2026-08-29 12:46:15 -04:00
..

Documentation

Technical documentation for SecureBit.chat. Start with the project README if you are looking for an overview or a quick start.

Document What it covers
ARCHITECTURE.md How a session is established, verified and torn down, and where each guarantee comes from
CRYPTOGRAPHY.md Key schedule, the Double Ratchet, SAS verification, memory handling
DESCRIPTOR-SBQ2.md The invitation format: wire layout, why it is small, the in-band key exchange, decoder rules
CONFIGURATION.md Deployment, ICE and TURN setup, privacy modes, file transfer policy
CALLS.md Voice and video: codec choices, adaptation, and why each value was picked
API.md Internal interfaces of the WebRTC manager and file transfer system
CONTRIBUTING.md Development workflow and what needs extra review
USE-POLICY.md Terms of use, intended use, and the limits of what the software can protect

Security policy and vulnerability reporting live in SECURITY.md at the repository root, where GitHub expects to find them.

Keeping this accurate

These documents describe the current release and are expected to change with it. Every value quoted here (limits, timeouts, algorithm parameters) is taken from the source rather than restated from memory, so if you change one in code, change it here in the same commit. CONTRIBUTING.md lists which documents are affected by which areas of the code.