aliceandbob-io / aliceandbob

🔐 A free, light and easy to use client-side tool to generate PGP key pairs, encrypt and decrypt messages.

aliceandbob.io 🌐🔐

A free, light and easy to use client-side tool to generate PGP key pairs, encrypt and decrypt messages.

Check it out! 🔥

Features ✨

• 🗝️ Generate PGP key pairs
• 🔒 Encrypt messages with the public PGP key of the receiver
• 🔓 Decrypt messages with your private PGP key

Tech 🔧

• HTML/CSS
• Ruby (v2.6.5)
• Rails (v6.0.3.2)
• Stimulus JS (v1.1.1)

Library 📚

OpenPGP.js (v5.3.0), a JavaScript implementation of the OpenPGP protocol. Find out more on openpgpjs.org.

Contributing 🍰

Please contribute using GitHub Flow. Refer first to the open issues then create a branch, add commits, and open a pull request!

You can also read the CODE OF CONDUCT.

When forking and cloning the repo, don't forget to do the following:

1. yarn install --check-files
2. bundle install
3. Duplicate the database.yml.template file and rename it database.yml
4. Update the database.yml file as needed to match your configuration
5. Then, rails db:setup.

Do you like this app? ❤️

License 📄

Licensed under the MIT License.

aliceandbob's Issues

[Feature request] Make passphrase optional

Passphrases are not nessesary to generate a key pair, so the tool shouldn't require them.
This also goes for decrypting messages. The tool is currently unable to decrypt messages that were encoded with another tool without a passphrase.

Design Devise pages

Design the Devise pages

Following pages should be tackled:

• signup
• signin
• Forgot password

docs: update of the landing page

The screenshot that appears in the /app/views/pages/_section_webapp.html.erb page needs to be replaced.
The new screenshot may be found here and is named screenshot-online-pgp-tool_v2.png.

Fix: warning message

The warning message (<div class="warning">) which appears in the 3 following pages should be updated:

• /app/views/online_pgp_tool/_generate.html.erb
• /app/views/online_pgp_tool/_encrypt.html.erb
• /app/views/online_pgp_tool/_decrypt.html.erb

The new message should be the following:

This tool will soon migrate to a new version of openPGP.js: the <kbd>brainpool</kbd> and <kbd>secp256k1</kbd> curves will no longer be supported for key generation, encryption and decryption.

Next, the text of the concerned warning div should be displayed in dark, using the bootstrap utility class text-dark.

Display of footer on small screens

Footer should display on small screen without scrolling

nav is fixed on the bottom on small screens so it hides the footer.
height of main page should be updated in accordance.

Need an apple touch icon

On iPhone and iPad, we can add a shortcut to your website and make it full screen and like an app (PWA) but there is no apple touch icon so the icon is not a logo but a window on your website and it's not really beautiful.

Adding an apple touch icon will make it an app like experience on iPad.

[BACKEND] Add possibility to users to sign up

Implement the ability for users to sign up on the server side

Specs

Should use Devise gem
Should be able to sign up by email and password
Should be redirected to the main page once connected

[FRONTEND] Implement the ability to sign up

Implement on the front end the ability for the users to sign up

Specs

Should have an icon link in the header which redirect to the signin/signup page

[Feature request] Singning messages and verifying signed messages

I suggest adding 2 new functions to the tool:
one to sign a message using sender's private key
and another to verify a signed message using sender's public key
This is commonly used to verify the sender's identity by anyone who has their public key.

Update landing screenshots

The 3 screenshots of the landing page need to be updated so that they match the feature recently added (different encryption options).

The 3 new screenshots may be found here and are named features_xxx_v2.

Add a footer

Add a footer

Display

• On the left: © [YEAR] - aliceandbob.io
• In the middle: Coded with ❤️
• On the right: a mailto:[email protected] link with an envelope icon

Specs

• Footer should be displayed at the bottom of the page using flex functionnalities in the #main element of the page content
• Could use JS to set [YEAR] to the current
• Use the emojipedia for the heart
• Use material-icons for the envelope icon