akronlogic/netdesk
1
0 Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

NetDesk 1.5.0 — source release

Browse Source
This commit is contained in:
NetDesk committed 2026-10-18 02:02:46 +00:00
commit 40318aafdd
227 files changed
+80798
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

server/web/security.html
+48
View File
@@ -0,0 +1,48 @@
<!DOCTYPE html>
<html lang="en" data-theme="dark">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Security — NetDesk</title>
<meta name="description" content="How NetDesk keeps your remote sessions private: AES-256 end-to-end encryption, PBKDF2 auth, TOTP 2FA, TLS transport and open source.">
<link rel="canonical" href="https://netdesk.space/security">
<meta property="og:title" content="Security — NetDesk">
<meta property="og:description" content="How NetDesk keeps your remote sessions private: AES-256 end-to-end encryption, PBKDF2 auth, TOTP 2FA, TLS transport and open source.">
<meta property="og:url" content="https://netdesk.space/security">
<meta name="theme-color" content="#0a0d14">
<link rel="icon" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect width='32' height='32' rx='7' fill='%233d7eff'/%3E%3Cpath d='M8 20l8-12 8 12-8-4z' fill='white'/%3E%3Crect x='12' y='18' width='8' height='7' rx='2' fill='white'/%3E%3C/svg%3E">
<link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900&display=swap" rel="stylesheet">
<link rel="stylesheet" href="site.css?v=2">
</head>
<body data-page="security">
<div id="siteHeader"></div>
<section class="section"><div class="wrap"><div class="prose">
<h1>Security &amp; Trust</h1><p class="updated">Our commitment to keeping your remote sessions private.</p>
<h2>End-to-end encryption by default</h2>
<p>Every NetDesk session negotiates an ephemeral <strong>ECDH P-256</strong> key exchange and encrypts all media with
<strong>AES-256-GCM</strong>, per frame, with a fresh nonce. The relay server forwards only opaque ciphertext — it
cannot decrypt your screen, input, files or clipboard. Only the two endpoints hold the keys.</p>
<h2>Authentication</h2>
<p>The host password never leaves your machine in the clear: the viewer proves knowledge of it with a
<strong>PBKDF2-HMAC-SHA256 (200,000 iterations)</strong> challenge/response, throttled on failure. Optional
<strong>TOTP two-factor</strong> adds an authenticator code at connect. An optional registration key restricts which
hosts may register with your server.</p>
<h2>Transport</h2>
<p>All traffic runs over <strong>TLS (WSS)</strong> to your server. We recommend a real certificate (Let's Encrypt);
NetDesk ships automation for it. HTTP is available only for localhost/LAN testing.</p>
<h2>You own the data</h2>
<p>NetDesk is self-hosted. There is no NetDesk cloud in the path. Your session metadata, accounts and audit logs live on
<strong>your</strong> server. Nothing is sent to a third party.</p>
<h2>Open source</h2>
<p>The entire stack is open source and auditable. Don't trust our word — read the code at
<a href="/git/akronlogic/netdesk">netdesk.space/git/akronlogic/netdesk</a>.</p>
<h2>Responsible disclosure</h2>
<p>Found a vulnerability? Email <a href="mailto:security@netdesk.space">security@netdesk.space</a>. We respond within 72
hours and credit reporters.</p>
</div></div></section>
<div id="siteFooter"></div>
<script src="site.js?v=3"></script>
</body>
</html>