README
¶
Tornote
Self-destructing notes written on Go with Stanford JS Crypto Library for client-side encryption/decryption.
Latest stable version deployed on https://tornote.herokuapp.com/
Security aspects
-
AES-256 encryption used with 27 bytes secret key (randomly generated on client).
-
All private data including secret not leaving a web-browser without encryption.
-
Server stored only anonymous encrypted data (without any reference to author or reader).
-
Note decrypted on the client-side via the SJCL and immediately deleted on server after reading.
If you have ideas to improve the our safety/security so far as possible please post the issue.
Settings
Configuration settings can be set with .env file or environment.
DATABASE_URL - Data source name (DSN) for PostgreSQL database.
SECRET_KEY - Server secret used for CSRF protection.
HTTPS_ONLY - HTTPS only traffic allowed (disabled by default).
Getting started
Deploy to Heroku cloud:
Build and run locally with Docker:
git clone https://github.com/osminogin/tornote
docker build -t tornote .
docker run -p 8000:8000 -e DATABASE_URL=... -e SECRET_KEY=... tornote
ChangeLog
License
See COPYING
Documentation
¶
Index ¶
- func CreateNoteHandler(s *Server) http.Handler
- func HealthStatusHandler(w http.ResponseWriter, r *http.Request)
- func MainFormHandler(s *Server) http.Handler
- func PublicFileHandler(w http.ResponseWriter, r *http.Request)
- func ReadNoteHandler(s *Server) http.Handler
- func ReadRawNoteHandler(s *Server) http.Handler
- func RedirectToHTTPSMiddleware(next http.Handler) http.Handler
- type Note
- type Server
- type ServerOpts
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func CreateNoteHandler ¶
CreateNoteHandler save secret note to persistent datastore and return note ID.
func HealthStatusHandler ¶
func HealthStatusHandler(w http.ResponseWriter, r *http.Request)
Return status for health checks.
func MainFormHandler ¶
MainFormHandler renders main form.
func PublicFileHandler ¶
func PublicFileHandler(w http.ResponseWriter, r *http.Request)
PublicFileHandler get file from bindata or return not found error.
func ReadNoteHandler ¶
ReadNoteHandler print encrypted data for client-side decrypt and destroy note.
func ReadRawNoteHandler ¶
ReadRawNoteHandler print encrypted data for client-side decrypt and destroy note.
Source Files
Directories