What changed in ExoSeal.
Numbers up to 1.0 are development stages, there is no tagged release yet. These are the milestones, newest first. A public feed lets you subscribe.
Current version: v0.8.0
Sent list and withdrawing links
Under "Sent" you see whether a link was opened, expired or reported, and you can withdraw open links. A link tells the recipient why it no longer works. Also new: service provider details in the privacy policy, terms of use and an imprint with all mandatory details.
New pages and polish
Dedicated pages for security, comparison, open source and this changelog. Guides with search and questions, a reworked FAQ, footer and error pages, a new logo.
New design and home page
Home page with an explainer animation, separate areas for site, app and recipient, a dedicated sign-in page, light and dark mode.
Request link
Request secrets: the key pair is created in the browser and the reply stays end-to-end encrypted. Notification by email or webhook.
Hardening
Strict Content-Security-Policy with a nonce, security headers, report function, custom error pages and operations documentation.
Send secrets
Encryption in the browser, single retrieval, expiry, optional second password and abuse limiting.
Project start
Foundation with backend, frontend and Docker, sign-in with OpenID Connect and an allowlist, German and English.