About - Self Destructing Notes

Free and Open Source Software

d-note is a Free and Open Source Python web application written in Flask. It is licensed under the GPLv3, and is available for you to host on your own server.

What is it?

It is a platform for sending secure messages that self-destruct immediately after being read. Unread messages are automatically deleted after 30 days. As such, this application is suitable for sending private information such as PINs, usernames, passwords, and other sensitive information over insecure channels.

Security

All notes are encrypted on the server, and decrypted when the recipient views the note. The note can only be viewed once, and the note is securely destroyed on the server by overwriting the note with random data before deletion. Private passwords can be used to encrypt the note, instead of using the default server password. Private passwords are never stored on disk. In addition to private passwords, duress keys can be generated which will immediately destroy the note without decrypting it, in case you are being forced to provide the private password that decrypts the note.

You currently have JavaScript disabled. JavaScript is required to use this website. Here is all the JavaScript code that is executed:

Hashcash- Hashcash tokens are minted when submitting a note to prevent denial of service POST attacks and to prevent spamming.

Fingerprinting- As part of Hashcash tokens, an anonymous MurmurHash resource string is calculated.

QR Code Generation- A QR Code is generated for sending to the recipient to scan using their mobile device to read the note.

Notifications- When posting a note, JavaScript is used to let you know that while you are posting your note, a Hashcash token is being minted.

Redirects- When viewing a note, JavaScript is used to redirect your browser after a timeout.

There is no tracking code, such as analytics, cookies, etc. in the default source code. If this site administrator has installed tracking code, I recommend installing the Ghostery and the Adblock Plus extensions, which are both available for Google Chrome and Mozilla Firefox browsers.