BillKeenan / dead-drop-python

secure 1 time message generator
https://dead-drop.me
73 stars 14 forks source link

Question - using API (Python code) for automation #17

Open tomerbsentinel opened 2 years ago

tomerbsentinel commented 2 years ago

Hi all,

Is it possible to send a text using Python code and retrieve the data? I haven't seen any documentation on how to use dead-drop programmatically.

My goal is to send: {"text": "I need this data secured"} and get the ID (the link) and the password for it.

Any help would be appreciated!

tomerbsentinel commented 2 years ago

anyone?

BillKeenan commented 2 years ago

Hi, that's not a use case I intended to support.

tomerbsentinel commented 2 years ago

Hi @BillKeenan ,

Thanks for the reply back. If it's possible, Could you write here a few sentences if it's possible or not and I'll try to fork this project and make it happen. I'm really new beginner, but I will do my best.

BillKeenan commented 2 years ago

well, the challenge there, is you would be sending the text unsecured, which is counter to the premise of what I've done here... Even HTTPS, then the server would still be able to read it. SO you'd need to do the encryption client side, which you can do of course, at which point there's not much stopping you from submitting to dead-drop for retrieval.

I've considered a quick mobile app to do this, but including it in other apps would mean making an SDK for you to consume, which is turning into a lot of work for me to do for free.

to elaborate , the principle I had here, is neither the unencrypted text, nor the password is EVER moved off the client where it can be intercepted by a MITM, or in fact myself, the dead-drop server never has access to the unencrypted text or the password.

tomerbsentinel commented 2 years ago

which is turning into a lot of work for me to do for free.

How can we message privately? I can't see your email nor sending messages through Github.

rr-bill-keenan commented 2 years ago

It's at the footer of the site. bill@bigmojo.net