witness-vault: AES-256-GCM self-decrypting HTML vaults (no install)

Wed, 14 Oct 2026 15:48:57 +0000

Engineer — Learn: Interesting pattern for offline/air-gapped secret sharing using native WebCrypto — worth evaluating if your team needs zero-dependency encrypted file handoff, but no action required on running systems.
SOC/IR — Learn: Self-decrypting HTML files are a known smuggling vector; this open-source implementation illustrates the technique and may inform tuning of HTML smuggling detections in your email/proxy pipeline.
Leader — Skip

Webcrypto on CuraSec