Building an Open-Source, Zero-Knowledge DocSend Alternative with React 19 and Supabase

Описание и применение

Разработка DocTransfer — открытой альтернативы DocSend с нулевым знанием. Файлы шифруются на стороне клиента с помощью OpenPGP.js и WebCrypto, ключи хранятся в хэше URL, а не на сервере. Используется React 19 и Supabase.

Задача

Sharing sensitive documents like pitch decks, financial reports, or legal contracts typically requires expensive platforms ($250+/month) that store unencrypted files on their servers, posing privacy and security risks.

Результат

DocTransfer is an open-source, zero-knowledge document sharing platform that encrypts files client-side, keeps keys out of server logs, and adds forensic watermarks, offering a secure alternative to expensive commercial VDRs.

Рабочий процесс

• Encrypt files in the browser using WebCrypto API and OpenPGP.js (AES-256-GCM).
• Store encryption keys in URL hash fragments to ensure they are never transmitted to the server.
• Render dynamic forensic watermarks with recipient email overlays on the canvas layer.
• Utilize Supabase for database, authentication, and storage with strict Row-Level Security.
• Implement biometric sign-in using SimpleWebAuthn and generate digital certificates.
• Track real-time page-by-page engagement heatmaps and viewer telemetry.

Доказательства

In DocTransfer, encryption happens entirely on the client before the payload leaves your browser

Источник

Encryption keys are kept in URL hash fragments (#key=...), which are never sent to our servers.

Источник