Interesting, it seems to work very similarly to Firefox Send.
For communications in the other direction, such as when you want to make sure the other person sends you the content securely, there is https://github.com/whitesmith/hawkpost (disclaimer, this was an hackathon project I participated some years ago). Hawkpost doesn't even store the encrypted content.
I wonder if there is a solution that would correctly deal with both situations (never requiring the other end to sign up or know anything about encryption).
That said, I think a lot of the value of Firefox Send, which I used a bunch, was that it was maintained by a trusted brand in Mozilla. Indie groups won't have that reputation. And if I wanted to self-host, I would just use magic-wormhole.
Mozilla's instance was obviously associated with the big names 'Mozilla' and 'Firefox' which made it easy to abuse. That isn't an issue now. I guess that helps.
The Mozilla one was being used to deploy malware, so you should watch out for that in advance. Frankly, I don't know how though, and I think Mozilla couldn't figure it out either -that's why it was shut down instead of fixed
This is really clever. And looks like it's easy to self-host via Docker.
> I wonder if there is a solution that would correctly deal with both situations (never requiring the other end to sign up or know anything about encryption).
I'm actually in the midst of building out a tool for that exact scenario[0]. You can send it to anyone so long as you know the email or username they use for a service that implements OAuth. If they successfully authenticate and the server sees their username / email match up, it sends back the encrypted data to the frontend, which then decrypts it with the key in the URI fragment. It's neither audited nor open source just yet, so I don't recommend using it for actual secret sharing until then.
There hopefully will be one soon! The backend was written haphazardly in a weekend, so once I clean it up to save myself some embarrassment, I'll open up the source on Github. I'll send you an email if that happens (using the one in your HN profile).
For communications in the other direction, such as when you want to make sure the other person sends you the content securely, there is https://github.com/whitesmith/hawkpost (disclaimer, this was an hackathon project I participated some years ago). Hawkpost doesn't even store the encrypted content.
I wonder if there is a solution that would correctly deal with both situations (never requiring the other end to sign up or know anything about encryption).