Ephemera release notes

End-to-end encryption — September 2026

Messages and images are now end-to-end encrypted, closing the biggest gap from the initial MVP.

• End-to-end encryption via ephemeral ECDH (P-256) key agreement and AES-256-GCM, negotiated directly between the two devices in a room
• Safety code shown on both devices to detect a tampered handshake
• Forward secrecy — keys are generated fresh per room and never stored anywhere
• The server now rejects any plaintext message; only encrypted envelopes and handshake frames are accepted
• QR code join, so a room can be shared by scan instead of typing the code

v0.1.0 — MVP

Initial minimal viable product.

• Create a room and get a short room code
• Join a room by code or by direct /r/<room-id> link
• Real-time text messaging over WebSockets
• Image sharing up to 2 MB, with a full-view preview modal and copy/download
• No accounts, authentication, database, or persisted message history
• Hard limit of 3 active rooms system-wide