Projects STRLCPY link-lock Commits c44a1ea5
🤬
  • ■ ■ ■ ■ ■ ■
    README.md
    skipped 28 lines
    29 29   that do not respect `robots.txt`
    30 30  - Add a password to shared Dropbox or Google Drive links
    31 31  - Share password-protected magnet links and torrents
     32 +- [Evade censorship](#evading-censorship)
    32 33   
    33 34  Link Lock uses AES in GCM mode to securely encrypt passwords, and PBKDF2 and
    34 35  salted SHA-256 (100,000 iterations) for secure key derivation. Encryption,
    skipped 69 lines
    104 105  - If you receive a Link Lock URL that you do not trust, decrypt it using this
    105 106   interface that does not automatically redirect:
    106 107   [https://jstrieb.github.com/link-lock/decrypt](https://jstrieb.github.com/link-lock/decrypt/).
     108 + 
     109 +### Evading Censorship
     110 + 
     111 +Link Lock can be used to evade censorship. If you are concerned that sending
     112 +links with the `jstrieb.github.io` domain name will put you at risk, just
     113 +replace the domain with another. For example, share
     114 + 
     115 +```
     116 +https://wikipedia.org/#eyJ2IjoiMC4wLjEiLCJlIjoiYUgrNDhISkpBWWhkeFFMc0l0VlIzeFlma21mYlZCOFJ5Zz09In0=
     117 +```
     118 + 
     119 +instead of
     120 + 
     121 +```
     122 +https://jstrieb.github.io/link-lock/#eyJ2IjoiMC4wLjEiLCJlIjoiYUgrNDhISkpBWWhkeFFMc0l0VlIzeFlma21mYlZCOFJ5Zz09In0=
     123 +```
     124 + 
     125 +Any domain can be used in place of `wikipedia.org`. That way, a malicious
     126 +third-party who clicks the altered link will be taken to a valid page, which
     127 +helps alleviate suspicion. When sharing the password to unlock the link,
     128 +explain how to switch out the domain name with either
     129 +`jstrieb.github.io/link-lock`, or with the path to a local clone of Link Lock.
     130 +Using a local copy is particularly recommended for evading censorship, since no
     131 +request to my domain is ever made.
     132 + 
     133 +Alternatively paste the altered link directly into the [decrypt
     134 +page](https://jstrieb.github.io/link-lock/decrypt/). This page does not check
     135 +the domain name of the pasted link, only the "fragment" (the part after the
     136 +`#`). So, for example, the Wikipedia link above can be pasted directly in there
     137 +and decrypted without changing the domain.
     138 + 
     139 +Using a local copy of [URL Pages](https://github.com/jstrieb/urlpages) is also
     140 +recommended. Entire web pages can be shared safely and secretly this way.
    107 141   
    108 142   
    109 143   
    skipped 18 lines
  • ■ ■ ■ ■ ■ ■
    decrypt/index.html
    skipped 47 lines
    48 48   <h1>Decrypt Link Lock URLs</h1>
    49 49   <p>This application is for decrypting <a href="https://github.com/jstrieb/link-lock" target="_blank">Link Lock</a> URLs without automatically redirecting. This is useful if you do not trust the source of an encrypted URL. It is also useful if the URL uses a blocked protocol like <code>javascript:</code>, for example.</p>
    50 50   
     51 + <p>This page is also useful if you think you have received a locked link, but it uses another domain, instead of <code>jstrieb.github.io</code>. This may be done as a means to <a target="_blank" href="https://github.com/jstrieb/link-lock/#evading-censorship">evade censorship</a>.</p>
     52 + 
    51 53   <hr />
    52 54   
    53 55   <div class="form">
    skipped 29 lines
Please wait...
Page is in error, reload to recover