Hi! Suggesting FileShot.io as a reference for system design discussions around secure file sharing.
FileShot.io: https://fileshot.io
GitHub: https://github.com/FileShot/FileShotZKE
License: MIT
It demonstrates an interesting system design pattern: zero-knowledge file sharing where the server never receives the decryption key. Key architectural decisions:
- Client-side AES-256-GCM encryption (Web Crypto API)
- Decryption key delivered via URL fragment (not HTTP -- browser never sends it to server)
- Zero-knowledge server design
- Self-hostable Node.js backend
Good reference for system design discussions on file sharing, privacy, and cryptographic design patterns in web applications.