This is a simple (and naive) little project to allow wrapping encrypted HTML into a little decryption wrapper, that will do the decryption client side using browser native decryption capabilities.
I sometimes produce markdown documents that I want to share in a rendered form but that contain sensitive information. Most filesharing systems (dropbox, nextcloud, seafile, google drive, etc.) will only allow to download the attached files but not show the HTML as-is. To keep the content "safe" from unintended visitors and not having to trust the server I share it with, I can now encrypt it but still produce a link that can be viewed immediately.
The security of course relies only on the fact that the key is not practically guessable. As soon as the (full) URL leaks, the security is gone.
You need Go 1.17 or later to build this tool.
If you have it, simply run go build . in the checked out repository
or go install . to directly put it into your $GOPATH/bin.
- Create the HTML file you want to share.
- Call
cryptml source/myfile.html target/myfile.html - Note the printed key.
- Upload
target/myfile.htmlto the HTTP server of your choice. - Go to your browser and visit:
https://<yourserver>/myfile.html#<key>(replacing<key>with the one you noted earlier).
Intended use case: the server in question allows uploads via WebDAV and serves the files via default HTTP.
cryptml myfile.html https://user:pass@example.com/dav/myfile.html
If the URL ends with /, the original filename is appended automatically.