Encryption Technology
Deep dives into zero-knowledge encryption, cryptographic principles, and advanced security technologies.
Zero-knowledge encryption means the provider stores ciphertext it cannot decrypt. How it differs from E2EE and zero-knowledge proofs, plus URL-fragment secret sharing.
Read more 
OneTimeSecret documents server-side encryption; VanishingVault uses client-side AES-256-GCM with a URL-fragment key. Compare trust models and self-hosting.
Read more 
ZK vs E2EE vs encryption-at-rest: who holds the keys, what providers can read, subpoena nuance, and how URL-fragment secret sharing fits.
Read more 
Technical deep dive: AES-256-GCM in the browser, URL-fragment keys (RFC 9110), Cloudflare Workers + KV, burn-after-read, threat model, and KV vs Durable Objects.
Read more 
Why client-side encryption and URL-fragment keys are the default for one-time secret sharing — plus honest limits (browser trust, bearer URLs).
Read more