Siavash Sameni 7fe6de0ba1 Alias TTL renews only on authenticated actions (sending messages) ...

- Sending a message includes `from` fingerprint
- Server renews alias TTL on send (proves identity: you encrypted it)
- Polling/receiving does NOT renew (anyone can spam messages to you)
- Key registration does NOT renew (separate concern)

This prevents alias keepalive attacks where someone spams a user
just to keep their alias from expiring.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-27 07:39:15 +04:00

warzone

Alias TTL renews only on authenticated actions (sending messages)

2026-03-27 07:39:15 +04:00

apache

v5: stable chat server with web UI, SSH tunnel, and nginx proxy

2026-03-26 14:38:36 +04:00

chat.py

Click on DM lock icon to pre-fill /dm @username in input

2026-03-26 17:04:31 +04:00

DESIGN.md

DESIGN.md: DNS-based key transparency, resolve remaining questions

2026-03-26 20:55:15 +04:00

nginx

v5: stable chat server with web UI, SSH tunnel, and nginx proxy

2026-03-26 14:38:36 +04:00

nginx.txt

v5: stable chat server with web UI, SSH tunnel, and nginx proxy

2026-03-26 14:38:36 +04:00

tunnel.py

v9: multi-destination tunnel support (parspack, mequ, alipi)

2026-03-26 15:03:23 +04:00

Description

No description provided

328 MiB

Languages

Rust 84%

Python 11.7%

Shell 4.3%