When I first discovered WebAuthn in 2019 I imagined it being used for something like this, but never imagined something like the prf extension enabling true E2EE like this. Everything happens in the browser; there's no server used in any of this because to me that defeated the purpose. I also challenged myself to make a decent UX on top of this because what good is strong encryption if it's not usable?

For best results make sure you're using Chrome 116 and a recent FIDO2 security key.

Show HN: Hardware-backed end-to-end message encryption, in the browser
sneakernetsend.com