Building an Open-Source, Zero-Knowledge DocSend Alternative with React 19 and Supabase

说明与用途

构建 DocTransfer，一个开源的零知识 DocSend 替代品。文件使用 OpenPGP.js 和 WebCrypto 在客户端加密，密钥存储在 URL 哈希中，而非服务器。使用 React 19 和 Supabase 构建。

问题

Sharing sensitive documents like pitch decks, financial reports, or legal contracts typically requires expensive platforms ($250+/month) that store unencrypted files on their servers, posing privacy and security risks.

结果

DocTransfer is an open-source, zero-knowledge document sharing platform that encrypts files client-side, keeps keys out of server logs, and adds forensic watermarks, offering a secure alternative to expensive commercial VDRs.

工作流

• Encrypt files in the browser using WebCrypto API and OpenPGP.js (AES-256-GCM).
• Store encryption keys in URL hash fragments to ensure they are never transmitted to the server.
• Render dynamic forensic watermarks with recipient email overlays on the canvas layer.
• Utilize Supabase for database, authentication, and storage with strict Row-Level Security.
• Implement biometric sign-in using SimpleWebAuthn and generate digital certificates.
• Track real-time page-by-page engagement heatmaps and viewer telemetry.

证据

In DocTransfer, encryption happens entirely on the client before the payload leaves your browser

来源

Encryption keys are kept in URL hash fragments (#key=...), which are never sent to our servers.

来源