daxhackerman/simple-one-time-secret repository overview

⁠Quick reference

• Maintained by: daxAKAhackerman⁠

• Where to get help: the Docker Community Slack⁠, Server Fault⁠, Unix & Linux⁠, or Stack Overflow⁠

⁠Quick reference (cont.)

• Where to file issues: https://github.com/daxAKAhackerman/simple-one-time-secret/issues⁠

• Source of this description: repo's dockerhub_overview.md file⁠ (history⁠)

⁠What is Simple One Time Secret?

Simple One Time Secret is an application that allows to securely share information using a single-use link. Once the secret has been viewed (or once the expiration is reached), the secret is deleted from the database and no longer accessible. In addition, the server only has access to the encrypted secret and its ID. Everything else is generated client side and is never sent to the server. More precisely:

1. Using JavaScript, a random encryption passphrase (32 characters) is generated and used to encrypt the secret (aes-256-gcm).
2. The encrypted secret is sent to the server, along with the expiration timestamp.
3. The server replies with the ID (UUID) of the secret.
4. A link is generated by adding the deflated (pako.deflate) concatenation of the ID, IV and encryption key to the hash data of the URL. What makes the hash data special is that it is not sent as part of the URL when the Web page is accessed.
5. When the secret is retrieved, the server receives the ID of the secret, deletes it from the database, and returns the encrypted value back to the client (if it's not expired). Secret expiration is done using MongoDB TTL.
6. The secret value can then be decrypted client side using the information stored in the hash data.

⁠License

View license information⁠ for the software contained in this image.

As with all Docker images, these likely also contain other software which may be under other licenses (such as Bash, etc from the base distribution, along with any direct or indirect dependencies of the primary software being contained).

As for any pre-built image usage, it is the image user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within.