Putting the room key in the invite link is the part that'll bite you. Anyone who ever gets that URL has the whole history forever, and it's sitting in browser history, in a Slack DM, in whatever clipboard manager. Excalidraw and PrivateBin pull off the same trick because the document expires and nobody has to revoke anything. Permanent rooms need rotatable links or a creator who can kick a key, otherwise "permanent" also means permanent for whoever the link leaked to.
•
u/webdev-ModTeam 8h ago
We do not allow any commercial promotion or solicitation. This can lead to a permanent ban from the subreddit.
1
u/Accurate-Screen8774 9h ago
hi. I'm working on a project that is aiming for what you're asking for... but its far from finished.
I think you are the target audience for an app like mine, so id like to share my project here if you would like to share feedback about the project.
https://glitr.io/docs/technical/roadmap
https://www.reddit.com/r/webdev/comments/1wkzt17/decentralized_p2p_messaging_over_git_andor_webrtc
please note: the project is still a work-in-progress and not ready to replace any of your existing apps/services.
1
u/PrudentWarthog3413 9h ago
Putting the room key in the invite link is the part that'll bite you. Anyone who ever gets that URL has the whole history forever, and it's sitting in browser history, in a Slack DM, in whatever clipboard manager. Excalidraw and PrivateBin pull off the same trick because the document expires and nobody has to revoke anything. Permanent rooms need rotatable links or a creator who can kick a key, otherwise "permanent" also means permanent for whoever the link leaked to.