đź”’ StaticSecure: A decent way to password-protect your Glitch project

The Gallery
, ,
1

This project is now deprecated and has many flaws. A new version will be coming out later this week!


StaticSecure allows you to encrypt text/webpages (and hopefully later files) without a server. I have made documentation at the link below.
Here is an example of how it works. The source of that page is here.
This is basically how it works:

  1. You would encrypt a file, some text, or HTML using AES encryption here
  2. When a user comes to the webpage, they must have a decyption key, eg: ?key=[PASSWORD]. The key is in the URL as a query paramater.
  3. If the key is correct, the text is decrypted. If it is wrong, It shows nothing, or throws an error.

You can learn more about it/download it here: https://staticsecure.glitch.me

Edit: I made updates to the post because I didn’t really explain that much and @wh0 asked me to change it so thanks!

Edit 2: I’m deprecating this project! Mainly because of this, me needing to rewrite it, and the code being inefficient

4 Likes
2

So it will hide all HTML content if the key is incorrect?

3

Yes. It might throw an error of “Malformed UTF-8 text” if it is incorrect.

1 Like
4

Oooh, cool!

5

Thanks!
(10char)

1 Like
6

REHeader has uses other than generating README headers, I guess.

7

Hey, what would stop someone from sending a bunch of requests testing different passwords?

8

Lol I guess so

Nothing. It is a static site. However, it would probably be best to choose a strong password.

9

It would be nice if a cli was included with the program so you don’t have to google a random AES encryptor

10

https://staticsecure.glitch.me/encrypt.html

11

but that involves downloading the file and then reuploading. With a program you can encrypt all the files pretty quickly and possibly in parellel. If you want to stick to the web I suggest you do encryption in a web worker.
A small issue is that it breaks on slightly bigger files(i put in ffmpeg.exe for some reason)

image
image860Ă—374 5.43 KB

The main issue here is that since the files are encrypted not even glitch can decrypt them. What’s to stop someone from using this to share something against TOS using this. Maybe we can put a copy of the password in .env if the glitch team thinks the files are suspcious

12

At least you don’t need to download anything.

It’s designed for smaller things.

Ok.

13

this is awesome!!!

2 Likes
14

Thanks!
(10char)

1 Like
15

haha - i saw the lock emoji and thought “why is this thread locked?”

6 Likes
16

Ok, in the next version, Things will be loaded from URLs instead of direct strings because trying to keep strings in HTML files will kill memory.

17

The problem with that is there’s a 2000 character limit in the standard


which is fine when you want to store pictures of 8 bit art but not really practical for entire webpage.
18

No, I thought it was 4100.

19

The problem with what? Loading from a url?

20

oh nvm it sounded like you were loading from the url parameters

2 Likes