2y ago

I've been working on a end-to-end encrypted survey system

GitHub - WardPearce/Purplix.io

Thought people might be interested in seeing a project I've almost completed.

Purplix.io is a open source end-to-end encrypted survey system & warrant canary manger / viewer.

Would love some feedback or to answer any questions anyone has!

(Ignore the Nav not expanding to the bottom on some of the screenshots, thats just due to the screen shotting tool i use for full page screenshots.)

26 comments

Can't really see your screenshots but do you have alternate voting systems like Ranked Choice or Approval?
- Purplix is planning to launch with multiple choice, single choice, short answer and long answer. After launch we'll be adding additional answer types.

How does in compare to https://cryptpad.fr?
- Don't know the complete inner workings of Cryptpad. But it appears Purplix uses more modern encryption, uses more modern frameworks & has more safe guards against MITM attacks. Also additional options like captcha, proxy block, account required etc.

While I can't say I would have use for it myself I wish you luck and will spread it around where I can.
- Sheeesshh, you know when Public lewdness supports your project you know its good! Thanks for the kind words, have a great day.

- Yea I'd love to have Paaster audited, currently I don't think its likely I'd get enough funding to do so as auditing is expensive.

Where is the data stored? Is it encrypted at rest?
- No, survey questions and answers are encrypted & decrypted locally. At no point does the server or any other actors can view that plain data said from whom the survey is intended for.
  
  I understand encrypted-at-rest to mean that the data is always stored under encryption, except when it is being actively being used or displayed. Am I wrong? So in your usecase also, all data is stored under encryption and only decrypted by the surveyor or the surveyed; so this is encrypted at rest, no?

26 comments