Media
1 item
Description
Uses local GPG via Native Messaging to authenticate. Aegis HTTP is a secure, open-source browser extension designed to bridge your browser web requests with your local GnuPG (GPG) agent via the Chrome Native Messaging API. Designed for developers, privacy advocates, and security-focused organizations, Aegis HTTP enables seamless, passwordless logins and end-to-end (E2E) payload encryption without exposing your secret keys to the web. Key Features: - Passwordless Challenge Signing: Log in securely to supporting web applications by signing cryptographic challenges using your local GPG keys. - E2E Request/Response Encryption: Automatically encrypt outgoing request bodies and decrypt incoming responses transparently using standard GPG. - In-Memory Public Key Caching: Never pollution your GPG keyring. Aegis dynamically utilizes public keys for isolated session encryption without permanent imports. - Subkey Wizard: Automatically detects if your GPG key lacks an encryption subkey and guides you through generating one locally and securely (RSA, Curve25519). - Anti-Replay Protection: Enforces timestamp and nonce validation on all cryptographic messages to prevent reply attacks. How it works: Aegis HTTP intercepts registered gateway requests and communicates with a lightweight, secure native host running on your operating system. The native host interfaces directly with your local GnuPG command-line utility, ensuring your private keys never leave your machine. Source Code & Documentation: Aegis HTTP is fully open-source under the AGPL-3.0 License. For installation guides, developer integration playbooks, and native host daemons, visit: https://aegishttp.github.io/