Security
Private by design. Honest about limits.
ENDL3SS is under development and has not been independently audited. Do not rely on it for high-risk or life-critical communication.
Report a vulnerability
Send reports privately to security@endl3ss.lol. Do not publish exploitable details or access data that is not yours.
Security contact file
Automated tools can use /.well-known/security.txt.
Current status
No production release is supported yet. Cryptographic and operational claims remain design requirements until implemented, tested, documented, and reviewed.
Core boundaries
Clients own plaintext, encryption identity, and trust. Servers manage accounts and route encrypted data. Relays are treated as untrusted forwarders, but can still observe network addresses and traffic patterns.