Websites
Runtime: 2.7s
On December 3, 2022 at 6:29:52 AM UTC, https://cwtch.im/ was accessible when tested on AS48926 in Czechia.
Failures
HTTP Experiment
null
DNS Experiment
null
Control
null
DNS Queries
Resolver:
172.253.199.5
Query:
IN A cwtch.im
Engine:
system
Name
Class
TTL
Type
DATA
Answer IP Info
@
IN
A
178.128.230.2
AS14061 (DigitalOcean, LLC)
TCP Connections
178.128.230.2:443: succeeded
HTTP Requests
URL
GET https://cwtch.im/
Response Headers
Accept-Ranges:bytesContent-Length:20931Content-Type:text/htmlDate:Sat, 03 Dec 2022 06:29:52 GMTEtag:"637fa9cf-51c3"Last-Modified:Thu, 24 Nov 2022 17:28:47 GMTOnion-Location:http://cwtchim3z2gdsyb27acfc26lup5aqbegjrjsqulzrnkuoalq5h4gmcid.onion/Referrer-Policy:no-referrerServer:nginx/1.18.0 (Ubuntu)X-Content-Type-Options:nosniffX-Xss-Protection:1
Response Body
<!doctype html>
<html lang="en">
<head>
<meta name="generator" content="Hugo 0.68.3" />
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
<meta name="description" content="Decentralized, Surveillance Resistant Infrastructure">
<meta name="author" content="Open Privacy Cwtch Team">
<link rel="icon" href="/favicon.png">
<meta name="go-import" content="cwtch.im/cwtch git https://git.openprivacy.ca/cwtch.im/cwtch">
<meta name="go-source" content="cwtch.im/cwtch https://git.openprivacy.ca/cwtch.im/cwtch https://git.openprivacy.ca/cwtch.im/cwtch/src/master{/dir} https://git.openprivacy.ca/cwtch.im/cwtch/raw/master{/dir}/{file}#L{line}">
<title>Cwtch: Decentralized, Surveillance Resistant Infrastructure</title>
<meta name="twitter:card" content="summary_large_image"/>
<meta name="twitter:site" content="@openpriv" />
<meta name="twitter:creator" content="@openpriv" />
<link rel="alternate" type="application/rss+xml" href="https://cwtch.im/releases/index.xml" title="Cwtch Releases">
<meta property="og:image" content="https://cwtch.im/images/CWTCH_WEB/card_header.png" />
<meta property="og:url" content="https://cwtch.im" />
<meta property="twitter:title" content="Cwtch: Decentralized, Surveillance Resistant Infrastructure" />
<meta property="og:title" content="Cwtch: Decentralized, Surveillance Resistant Infrastructure" />
<meta property="og:description" content="Cwtch is a decentralized, privacy-preserving,
multi-party messaging protocol that can be used to build metadata resistant applications." />
<meta property="twitter:description" content="Cwtch is a decentralized, privacy-preserving,
multi-party messaging protocol that can be used to build metadata resistant applications." />
<link href="/css/bootstrap.min.css" rel="stylesheet">
<link href="/css/style.css" rel="stylesheet">
</head>
<body>
<nav class="text-center">
<div class="container">
<ul>
<li><a href="/">
<img src="/images/500x500_white.png" height="100px">
</a></li>
<li><a href="/#how-it-works">HOW IT WORKS</a></li>
<li><a href="/#screenshots">SCREENSHOTS</a></li>
<li><a href="https://docs.cwtch.im">HANDBOOK</a></li>
<li><a href="/#faq">FAQ</a></li>
<li><a href="https://git.openprivacy.ca/cwtch.im">CODE</a></li>
<li><a href="/changelog">CHANGELOG</a></li>
<li><a rel="me" href="https://fosstodon.org/@cwtch">MASTODON</a></li>
<li><a href="/download">GET CWTCH</a></li>
</ul>
</div>
</nav>
<div class="main">
<div class="container">
<div class="row text-center justify-content-around">
<div class="col-md-6 text-center">
<h1 class="display-4 font-weight-normal ">Surveillance Resistant Infrastructure</h1>
<a class="btn btn-primary" href="/download"><strong>GET CWTCH</strong></a><br/><br/>
<a class="btn btn-alt btn-primary" href="https://openprivacy.ca/donate"><strong>Donate</strong></a>
</div>
<div class="col-md-6 text-center">
<img src="images/CWTCH_WEB/cwtch%20phones.png" width="90%">
</div>
</div>
<hr/>
<div class="row">
<div class="col-md-6"><h1><strong>Cwtch /kʊtʃ/</strong></h1></div>
<div class="col-md-6"><p>Cwtch (/kʊtʃ/ - a Welsh word roughly translating to “a hug that creates a safe place”) is a decentralized, privacy-preserving,
multi-party messaging protocol that can be used to build metadata resistant applications.</p></div>
</div>
<br/><br/><br/>
<div class="row">
<div class="col-md-4 text-center"><strong>Decentralized and Open</strong><br/><p>Participants in Cwtch can host their own safe spaces, or lend their infrastructure to others
seeking a safe space. There is no “Cwtch service” or “Cwtch network”. The Cwtch protocol is <a href="https://git.openprivacy.ca/cwtch.im/cwtch">open</a>, and anyone is free to <a href="https://git.openprivacy.ca/sarah/cwtchbot">build bots, services</a> and <a href="https://git.openprivacy.ca/cwtch.im/cwtch-ui">user interfaces</a>
and integrate and interact with Cwtch.</p></div>
<div class="col-md-4 text-center"><strong>Privacy Preserving</strong><br/><p>All communication in Cwtch is end-to-end encrypted and takes place over Tor v3 onion services.</p></div>
<div class="col-md-4 text-center"><strong>Metadata Resistant</strong><br/><p>Cwtch has been <a href="https://docs.openprivacy.ca/cwtch-security-handbook/risk.html">designed</a> such that no information is exchanged or available to anyone without their explicit consent, including on-the-wire messages and protocol metadata.</p></div>
</div>
<hr id="how-it-works" />
<div class="row text-center justify-content-around align-items-center">
<div class="col-md-6 pb-2">
<h2>How it Works</h2>
<video width="99%" controls>
<source src="/cwtch-explainer.mp4" type="video/mp4">
</video>
</div>
</div>
<div class="row text-center justify-content-around align-items-center">
<div id="carouselExampleControls" class="carousel slide" data-ride="carousel">
<div class="carousel-inner">
<div class="carousel-item active">
<div class="card text-center" >
<img src="/images/CWTCH_WEB/BASE_0.png" class="d-block w-50 card-img-top" alt="...">
<div class="card-body">
<p class="card-text">Existing secure messengers provide end to end encryption so that eavesdroppers can't see the contents of the communication.
But these centralized platforms, much like a post office, act as clearing houses for messages.
</p>
</div>
</div>
</div>
<div class="carousel-item">
<div class="card text-center" >
<img src="/images/CWTCH_WEB/BASE_1.png" class="d-block w-50 card-img-top" alt="...">
<div class="card-body">
<p class="card-text">They need access to metadata about your activities such as who you talk to, when and how much in order to offer features like group messaging and offline delivery.</p>
</div>
</div>
</div>
<div class="carousel-item">
<div class="card text-center" >
<img src="/images/CWTCH_WEB/BASE_2.png" class="d-block w-50 card-img-top" alt="...">
<div class="card-body">
<p class="card-text">Communications metadata is known to be exploited by many adversaries to undermine the security of systems; to track people;
And to conduct large scale social networking analysis that feeds into mass surveillance systems.
These systems have grave consequences for freedom, autonomy and sometimes...even life itself.</p>
</div>
</div>
</div>
<div class="carousel-item">
<div class="card text-center" >
<img src="/images/CWTCH_WEB/BASE_3.png" class="d-block w-50 card-img-top" alt="...">
<div class="card-body">
<p class="card-text">Cwtch is a metadata resistant privacy platform designed to hide this metadata and help you resist surveillance.
</p>
</div>
</div>
</div>
<div class="carousel-item">
<div class="card text-center" >
<img src="/images/CWTCH_WEB/BASE_5.png" class="d-block w-50 card-img-top" alt="...">
<div class="card-body">
<p class="card-text">Like other systems, Cwtch uses end to end encryption.
but the journey its messages take is different. Cwtch is a decentralized peer to peer platform built on Tor onion services.
With no need for a centralized server to route messages through, and onion routing provided by Tor, Cwtch establishes direct connections between peers while minimizing and sometimes even eliminating the metadata that 3rd parties can see.</p>
</div>
</div>
</div>
<div class="carousel-item">
<div class="card text-center" >
<img src="/images/CWTCH_WEB/BASE_6.png" class="d-block w-50 card-img-top" alt="...">
<div class="card-body">
<p class="card-text">
Cwtch uses cryptographic identifiers that anyone can anonymously generate for themselves as many times as they want. This means they can't be tied to your real world identity by anyone but you.</p>
</div>
</div>
</div>
<div class="carousel-item">
<div class="card text-center" >
<img src="/images/CWTCH_WEB/BASE_7.png" class="d-block w-50 card-img-top" alt="...">
<div class="card-body">
<p class="card-text">Cwtch is designed to put consent first. This means we never want the app to do something you don't expect or want. Cwtch gives more control over what information is shared, how and who can communicate with who. We'll never included unsolicited content such as advertising or trends.</p>
</div>
</div>
</div>
<div class="carousel-item">
<div class="card text-center" >
<img src="/images/CWTCH_WEB/BASE_8.png" class="d-block w-50 card-img-top" alt="...">
<div class="card-body">
<p class="card-text">
Cwtch is designed for people who need to protect, not only the *content* of their communication, but *who* they are talking to as well.
Cwtch provides a safe space for you and your friends, family, comrades, and fellow rabble-rousers.
</p>
</div>
</div>
</div>
</div>
<a class="carousel-control-prev" href="#carouselExampleControls" role="button" data-slide="prev">
<span class="carousel-control-prev-icon" aria-hidden="true"></span>
<span class="visually-hidden">Previous</span>
</a>
<a class="carousel-control-next" href="#carouselExampleControls" role="button" data-slide="next">
<span class="carousel-control-next-icon" aria-hidden="true"></span>
<span class="visually-hidden">Next</span>
</a>
</div>
</div>
<hr id="screenshots" />
<h2>Screenshots</h2>
<br/>
<div class="row text-center justify-content-around align-items-center py-2">
<div class="col-6">
<img src="/images/screenshots/macos.png" class="w-100 shadow-1-strong rounded mb-4 border border-white" alt="Cwtch chat on MacOS">
</div>
<div class="col-6">
<img src="/images/screenshots/windows.png" class="w-100 shadow-1-strong rounded mb-4 border border-white" alt="Cwtch chat on Windows">
</div>
<div class="col-6">
<img src="/images/screenshots/linux.png" class="w-100 shadow-1-strong rounded mb-4 border border-white" alt="Cwtch chat on Linux">
</div>
<div class="col-6">
<img src="/images/screenshots/invite-linux.png" class=" w-100 shadow-1-strong rounded mb-4 border border-white" alt="Cwtch invite friend to group">
</div>
<div class="col-3">
<img src="/images/screenshots/android-contacts.png" class="w-100 shadow-1-strong rounded mb-4 border border-white" alt="Cwtch contact list on Android">
</div>
<div class="col-3">
<img src="/images/screenshots/android-chat.png" class=" w-100 shadow-1-strong rounded mb-4 border border-white" alt="Cwtch chat on Android">
</div>
</div>
<br/>
<hr id="faq" />
<h2 >FAQ</h2>
<h3>How is Cwtch different to Signal / Whatsapp / iMessage?</h3>
<p>Cwtch is decentralized and focused on metadata-privacy in addition to communications privacy. Unlike other communication platforms,
none of your messages are routed through a centralized server that has access to metadata such as your social network of friends, or
who sent and received a particular message.
</p>
<p>Even in experimental group chats which do rely on a routing server, the server learns no information about which messages belong
to which group, who is a member of which group, or who messages are intended for.</p>
<p> We believe that our tools should help people resist surveillance. Communications metadata is known to be exploited by many adversaries to undermine the security of systems; to track people;
and to conduct large scale social networking analysis that feeds into mass surveillance systems. And because of that, we explicitly
designed Cwtch for metadata privacy. </p>
<h3>How do I pronounce Cwtch?</h3>
<p>Like "kutch", to rhyme with "butch".</p>
<h3>What is the difference between a peer-to-peer connection and a cwtch group?</h3>
<p>Cwtch peer-to-peer connections allow 2 people to message each other directly. Behind the scenes peer-to-peer connections
use Tor v3 onion services to provide an encrypted, and metadata resistant connection. Because of this direct connection, both parties need
to be online at the same time in order to message each other.</p>
<p>Cwtch Groups allow multiple parties to participate in a single conversation using an untrusted server (that can be provided by 3rd party or
self hosted). Server operators cannot learn how many people are in a group, or what is being discussed. If multiple groups are hosted on a
single server then the server is unable to learn which messages belong to which group without the collusion of a group member. Unlike in peer-to-peer
conversations, group conversations can be conducted asynchronously, so everyone in a group doesn't need to be online at the same time.</p>
<h3>Why are cwtch groups experimental?</h3>
<p>Metadata-resistant group messaging is still an <a href="https://docs.openprivacy.ca/cwtch-security-handbook/open-questions.html">open problem</a>. While the version we provide in Cwtch Beta is designed to be secure and metadata
private it is rather inefficient and can be misused. As such we advise caution when using it, and only provide it as an opt-in feature.</p>
<h3>What happens if I forget the password to an encrypted profile? Or uninstall the application? Or delete my profiles folder?</h3>
<p>Unlike a traditional centralized service that can offer password overrides, Cwtch stores all your data locally on your device.</p>
<p>Without the password, and the encrypted file, it is practically impossible for anyone to derive the key to decrypt the profile. As such that profile should be considered
irretrievably lost.</p>
<h3>How can I run my own Cwtch Server?</h3>
<p>The reference implementation for a Cwtch server <a href="https://git.openprivacy.ca/cwtch.im/server">is open source</a>. Anyone
can run a Cwtch server, and anyone with a copy of the <a href="https://docs.openprivacy.ca/cwtch-security-handbook/key_bundles.html">server key bundle</a> of public keys can host groups on that server
<a href="https://docs.openprivacy.ca/cwtch-security-handbook/server.html">without the operator having access to group related metadata</a>.</p>
<h3>Why does Cwtch use data when I'm not using it?</h3>
<p>At startup Cwtch launches a Tor process so that it can setup and connect to v3 onion services.</p>
<p>All Cwtch activity takes place through these onion services, and are reliant on Tor, we setup Cwtch in a background
service that can be managed by Androids lifecycle management and can be reconnected to the foreground
application when it is unpaused, or restarted.</p>
<p>Without this background process management Cwtch would require Tor to be reinitialized
every time the app is loaded which would make it slow to start, and would make peer connection unusable on Android, as everytime the app went away you would go offline.</p>
<p>Note: Group connections are synchronized every time cwtch is online and it is not necessary to be online all the time when using them.</p>
<p>When a Tor process is running it will download some amount of data in order to retrieve consensus from the Tor network.
Any active onion services will also require a small amount of data to maintain their circuits and introduction points independent of any app use.</p>
<p>In the future we plan to allow cwtch clients to opt-in to using an external Tor connection such as Orbot to manage Tor processes
separately from Cwtch.</p>
<h3>How can I shutdown Cwtch?</h3>
<p>The front-pane of the app has a "Shutdown Cwtch" button (with an 'X') icon. Pressing this button will trigger a dialog, and on confirmation
Cwtch will be shutdown and all profiles will be unloaded.</p>
<h3>How can I get involved in testing Cwtch?</h3>
<p>For information on the libraries, protocol, threat model and open questions please check out the <a href="https://docs.openprivacy.ca/cwtch-security-handbook/">Cwtch Security Handbook</a>.</p>
<p>FuzzBot is our development testing bot. You can add FuzzBot as a contact: <code>4y2hxlxqzautabituedksnh2ulcgm2coqbure6wvfpg4gi2ci25ta5ad</code> .</p>
<p>Sending Fuzzbot the command <code>testgroup-invite</code> will cause FuzzBot to invite you to the Cwtch Testers Group!</p>
<p>For more information on FuzzBot see our <a href="https://openprivacy.ca/discreet-log/07-fuzzbot/">Discreet Log development blog</a>.</p>
<h3 id="how-to-support">How can I get involved in supporting Cwtch?</h3>
<ul>
<li>Report Bugs and Issues and Feature Requests: <a href="https://git.openprivacy.ca/cwtch.im/cwtch-ui/issues">https://git.openprivacy.ca/cwtch.im/cwtch-ui/issues</a></li>
<li>Submit Pull Requests: <a href="https://git.openprivacy.ca/cwtch.im/cwtch-ui">https://git.openprivacy.ca/cwtch.im/cwtch-ui</a></li>
<li>Volunteer to Translate: Contact team@cwtch.im to be added to our Lokalise translation team. We currently have translations for the following languages (help for other languages/locales welcome)!
<ul>
<li>English (100% Translated)</li>
<li>French (100% Translated)</li>
<li>German (100% Translated)</li>
<li>Italian (100% Translated)</li>
<li>Polish (100% Translated)</li>
<li>Russian (100% Translated)</li>
<li>Spanish (100% Translated)</li>
<li>Welsh (100% Translated)</li>
<li>Danish (89% Translated)</li>
<li>Norwegian (89% Translated)</li>
<li>Romanian (89% Translated)</li>
<li>Luxembourgish (26% Translated)</li>
<li>Greek (19% Translated)</li>
<li>Portuguese (16% Translated)</li>
</ul>
</li>
<li><a href="https://openprivacy.ca/donate">Donate to Open Privacy Research Society</a> to help us fund the development of new features!</li>
</ul>
</div>
<br/><br/>
</div>
<footer class = "text-center">
<div class="row">
<div class="col-4 col-md">
<h5>Research</h5>
<ul class="list-unstyled text-small">
<li><a href="https://docs.openprivacy.ca/cwtch-security-handbook/">Security Handbook</a></li>
<li><a href="https://openprivacy.ca/research/OPTR2019-01/">Token Based Services</a></li>
</ul>
</div>
<div class="col-4 col-md">
<h5>Developers</h5>
<ul class="list-unstyled text-small">
<li><a href="https://git.openprivacy.ca/cwtch.im/">Code</a></li>
<li><a href="https://git.openprivacy.ca/cwtch.im/cwtch-ui/issues">Report an Issue</a></li>
</ul>
</div>
<div class="col-4 col-md">
<h5><a href="https://openprivacy.ca/donate">Donate</a></h5>
<h5><a href="/privacy-policy">Privacy Policy</a></h5>
</div>
</div>
<div class = "text-center row">
<div class="col-12 col-md align-content-center text-center">
<a href="https://openprivacy.ca"><img src="/images/Open_Privacy_Logo_lightoutline.png" alt="Made by Open Privacy Research Society"/></a>
</div>
</div>
</footer>
</body>
<script src="/js/jquery-3.5.1.min.js"></script>
<script src="/js/bootstrap.min.js"></script>
</html>
Resolver
Resolver ASN
AS15169
Resolver IP
172.253.199.5
Resolver Network Name
Google LLC
Measurement UID
20221203062952.696620_CZ_webconnectivity_008abb1f32f97742
Report ID
20221203T062447Z_webconnectivity_CZ_48926_n1_o0bRBvANni1eMYxq
Platform
android
Software Name
ooniprobe-android-unattended (3.7.2)
Measurement Engine
ooniprobe-engine (3.16.5)