Technology used

A modern real-time stack with encryption designed into the core pipeline.

Core stack

  • Electron + React + Vite desktop client
  • Fastify HTTPS/WSS server with mediasoup SFU
  • SQLite persistence via better-sqlite3
  • pnpm monorepo with shared protocol types

Security model

  • Transport encryption with DTLS-SRTP and WSS
  • End-to-end encryption using AES-256-GCM via Insertable Streams
  • ECDH P-256 key exchange with HKDF
  • Persistent ECDSA P-256 identities and user verification fingerprints
  • Signed control messages and TOFU key pinning

Operations & deployment

  • Docker image and compose-friendly deployment
  • Configurable TLS modes (self-signed, Let's Encrypt, custom certs)
  • Electron packaging for Windows, macOS, and Linux
  • Role-based permissions and live admin controls

Architecture at a glance

packages/
├── shared/    # Protocol types, permissions, crypto types
├── server/    # Fastify (HTTPS) + mediasoup SFU + SQLite
└── client/    # Electron + React + Vite desktop app

Deeper technical references: README architecture section and security deep dive.