From 1d1d06c025be8b16a3535ecceffc26fe303977db Mon Sep 17 00:00:00 2001 From: Gab <24553253+gabrix73@users.noreply.github.com> Date: Mon, 29 Jun 2026 00:13:23 +0200 Subject: Update m2usenet UI and backend; add identicon renderer and nacl libs - index.php, send.php: updated client UI - m2usenet.go: backend changes - identicon.php: new identicon renderer - nacl.min.js, nacl-util.min.js: vendored client crypto libs --- index.php | 720 ++++++++++++++++++++++++++++++++++++++++++++++++-------------- 1 file changed, 555 insertions(+), 165 deletions(-) (limited to 'index.php') diff --git a/index.php b/index.php index 62497e9..4cec619 100644 --- a/index.php +++ b/index.php @@ -1,16 +1,15 @@ -
🔑 Have a saved identity? Load it to auto-fill all fields.
+ + +Or fill the fields below to create a new identity.
+About m2usenet: This application is a privacy-focused gateway that sends your messages to Usenet newsgroups via our mail2news gateways on the onion network. No access logs are collected, and your messages are routed through secure gateways.
-What is this? This step generates a "proof-of-work" token (hashcash) that prevents spam by requiring your computer to perform some calculations. This is similar to how cryptocurrencies work - you need to "mine" a valid token before sending a message.
-How to use: Enter your email address, select the difficulty level (higher bits = longer processing time), and click "Generate Token". Your browser will mine a valid token that will be required in the next steps.
+About m2usenet: A privacy-focused gateway that posts to Usenet newsgroups over Tor hidden services. No access logs are kept. To post you must first create — or load — a VFACE pseudonymous identity: an Ed25519 keypair whose public key deterministically generates your identicon. Same key → same identicon → same person over time.
+What is Proof-of-Work? This step generates a hashcash token that prevents spam by requiring your computer to perform some calculations.
Username
+email@example.com
+Hash:
⚠️ You must save your identity to continue!
+Click "Save Identity" above to download your identity file. This is required before signing and sending messages.
+What is this? This step creates a digital signature for your message using the Ed25519 cryptographic algorithm. This signature helps verify that the message was sent by you and hasn't been tampered with.
-How to use: First, generate a key pair (this creates a public and private key). Then, write your message and click "Sign Message". This will create a digital signature that will be attached to your post.
+What is this? Your keypair is generated and your message is signed locally in your browser with the self-hosted TweetNaCl (nacl) library — your Ed25519 secret key never leaves your device. Only the public identity (username, email, public key) is sent, to render the identicon. The signature proves you authored this post.
VFACE / Face Header: Your identicon is produced by the original identicons-cli engine — the same backend as identicons.virebent.art — so it is fully deterministic: the same key always yields the same identicon. It is embedded as a folded Face: header (RFC 4021/2822) alongside X-Ed25519-Pub and X-Ed25519-Sig, visible in newsreaders like Newsgrouper and re-verifiable by any reader from your public key.
What is this? This final step sends your signed message to the Usenet network via mail2news gateways. m2usenet v2.1.0 uses Tor for all connections with automatic fallback.
+What is this? This final step sends your signed message to the Usenet network via Tor hidden services.
Your message travels entirely within the Tor network:
+Converts email to Usenet posts while maintaining full anonymity within the onion network.
+Converts email to Usenet posts while maintaining full anonymity.
Final destination for Usenet Tor hidden service.
- 🔒 Privacy Guarantee: Your message never leaves the Tor network until it reaches the NNTP server. All three components (Pluto2 → Mail2News → NNTP) operate as Tor hidden services, providing end-to-end anonymity with protection against traffic analysis, timing attacks, and metadata correlation. + 🔒 Privacy Guarantee: Your message never leaves the Tor network until it reaches the NNTP server. All three components (SMTP → Mail2News → NNTP) operate as Tor hidden services, providing end-to-end anonymity.
How to use: Complete the form below with your name, newsgroups (max 3), subject, and verify that your message and authentication details are correct. Then click "Send" to post your message via the gateway system.