the crypto functionality can be seen [here](https://github.com/positive-intentions/.github/blob/main/cryptography/Cryptography.js) (it is used as a micro frontend and loaded into the main app at runtime). the main chat app is open source for transparency [here](https://github.com/positive-intentions/chat).

i think the approach on security in this app is unique and i would like to know which vulnerabilities i haven't considered. i try to answer all concerns in [this previous post](https://www.reddit.com/r/CyberSecurityAdvice/comments/1ev5kqn/is_this_a_secure_messaging_app/).

i think if i stick to the principle of avoiding using any kind of "required" service provider (myself included) and allowing the frontend and the peerjs-server to be hosted independently, im on track for creating a chat system with the "fewest moving parts". im hope you will agree this is true p2p and i hope i can use this as a step towards unparalleled privacy and security.

Looking forward to hearing your thoughts!

* The live app: [chat.positive-intentions.com](https://chat.positive-intentions.com/) * More information about the app: [positive-intentions.com](https://positive-intentions.com/) * Follow the subreddit to keep updated about the app: [](https://www.reddit.com/r/positive_intentions/)

(note: this app is an unstable, experiment, proof of concept and not ready to replace any other app or service. It's far from finished and provided for testing and demo purposes only. This post is to get feedback on the app to determine if i'm going in the right direction for a secure chat app)