- Enhanced user fingerprinting with WebGL, Canvas, and Audio fingerprinting - Hardware binding to prevent F5/Ctrl+F5 abuse - Persistent storage across browser sessions (localStorage + sessionStorage) - Global demo session counter with 10 session limit per device - Multi-tab protection (max 2 tabs simultaneously) - Anti-reset protection with hardware mismatch detection Demo Session Protection: - Advanced fingerprint generation with CPU benchmarking - Enhanced validation with cryptographic verification - Automatic cleanup and session completion tracking - Cooldown periods between sessions (1min + 15min completion) - Weekly partial reset of global counters Fixes: - Fixed SessionTimer console spam after connection disconnect - Added missing registerEnhancedDemoSessionUsage method - Corrected method calls from generateUserFingerprint to generateAdvancedUserFingerprint - Implemented proper event handling for connection state changes WebRTC Improvements: - Added peer-disconnect, new-connection, and connection-cleaned events - Enhanced connection cleanup with proper UI notifications - Fixed SessionTimer state management during disconnections - Prevented infinite re-rendering and console logging Performance Optimizations: - Auto-save persistent data every 30 seconds - Periodic cleanup of old session data (every 6 hours) - Memory management for used preimages (10k limit) - Tab heartbeat system for multi-tab detection Testing: - Demo sessions now properly enforce limits - P2P anonymity maintained (no server validation) - Compatible with incognito mode restrictions - Resistant to common abuse techniques
securebit-chat
🔒 World's most secure P2P messenger with Lightning Network integration. End-to-end encryption, pay-per-session model, zero data collection. WebRTC direct connections, quantum-resistant roadmap. Privacy-first communication for the Bitcoin age ⚡
🛡️ SecureBit.chat - Enhanced Security Edition 🎯 About the Project SecureBit.chat is a revolutionary P2P messenger that combines:
Military-grade cryptography (ECDH P-384 + AES-GCM 256) Lightning Network payments for sessions Perfect Forward Secrecy with automatic key rotation Zero-trust architecture without servers
✨ Key Features 🔐 Cryptography
ECDH P-384 key exchange AES-GCM 256-bit encryption ECDSA digital signatures Perfect Forward Secrecy Out-of-band verification against MITM attacks
⚡ Lightning Network
Payments in satoshis for sessions WebLN support Instant microtransactions Private payments
🌐 P2P Architecture
Direct connection via WebRTC No central servers Impossible to censor No metadata collection
🚀 Quick Start
Open: https://SecureBit.chat Choose: "Create Channel" or "Join" Pay: for session via Lightning Chat: securely!
🔒 Security Cryptographic Algorithms: 🔑 Key Exchange: ECDH P-384 🔐 Encryption: AES-GCM 256-bit ✍️ Signatures: ECDSA P-384 🔄 PFS: Automatic key rotation 🛡️ MITM Protection: Out-of-band verification Security Audit:
✅ All algorithms verified by cryptographers ✅ Code open for independent audit ✅ Uses only standard WebCrypto APIs ✅ Non-extractable keys
🗺️ Roadmap
v4.0 ✅ Enhanced Security Edition (current) v4.5 🔄 Mobile & Desktop applications v5.0 📅 Quantum-resistant cryptography v5.5 📅 Group chats v6.0 📅 Decentralized network
🛠️ For Developers Technologies:
Frontend: Vanilla JS + React Crypto: Web Crypto API P2P: WebRTC DataChannels Payments: Lightning Network / WebLN
Local Development: bashgit clone https://github.com/SecureBitChat/securebit-chat.git cd securebit-chat python -m http.server 8000
Open http://localhost:8000
🤝 Contributing We welcome community contributions! How to help:
🐛 Report bugs 💡 Suggest ideas 🔍 Security audit 📖 Improve documentation 🌍 Translations
📄 License MIT License with mandatory attribution ⚠️ Disclaimer SecureBit.chat is provided "as is". Use at your own risk. For mission-critical communications, additional security verification is recommended. 📞 Contacts
🌐 Website: https://SecureBit.chat 📧 Email: lockbitchat@tutanota.com