Challenges
Guaranteeing that secrets are encrypted before leaving the browser while keeping UX simple and link-based.
Sharing sensitive data over chat/email creates permanent risk. Dele.to enables time-boxed sharing without server-side knowledge of the secret.
Next.js
Web Crypto API
AES-256-GCM
Upstash Redis
TTL / Expiry
Architecture
Used Web Crypto (AES-256-GCM) with key material stored in the URL fragment, plus TTL-backed storage for automatic expiry.
Results
Enables safer operational sharing of credentials and one-time secrets with reduced long-term exposure.
Performance & Scalability
- High-concurrency support using Upstash Redis for serverless state
- Vercel serverless deployment for optimized global delivery