I built Iriszip, an encrypted P2P file transfer that runs in the browser

Iriszip is an encrypted peer-to-peer file transfer platform that operates entirely within a web browser, eliminating the need for app installations, account creation, or initial file uploads. To use Iriszip, simply open the website on both devices you wish to transfer files between, and scan a QR code or enter a 9-digit pairing code. Files or text can then be sent directly from the browser.

When both devices are on the same network, transfers can even occur directly between the devices themselves, achieving speeds comparable to a local area network (LAN). In cases where a direct connection is not feasible over the internet, Iriszip attempts to establish a direct WebRTC connection first. If that is not possible, the system falls back to a relay service. However, it is important to note that the relay only handles encrypted ciphertext and does not store any file or message content on its servers.

The relayed connections ensure that encrypted data only remains in memory for a brief period, and the session state is discarded once the session ends. The project's security focus grew significantly beyond the initial expectations. Iriszip employs end-to-end encryption, and the cryptographic protocol design underwent an independent security review.

All components of Iriszip are open source, with the browser client licensed under MIT, the cryptographic core under Apache-2.0, and the server under AGPL-3.0. Additionally, the server can be self-hosted using Docker Compose. To try Iriszip, visit https://iriszip.com.

The project remains a solo endeavor, and it has only recently gone public. The creator is particularly interested in receiving feedback from individuals with expertise in WebRTC, cryptography, networking, privacy, or self-hosted software. If you encounter any issues, successfully break something, or believe a part of the design could be improved, the creator encourages you to share your thoughts.