Clats Tools Cryptography Progressive Web Apps

🔒 Cybersecurity, cryptography, ciphers, computer security, information technology, encryption apps, Claude Shannon 🔒

---

By Joshua M Clatney ©️ All Rights Reserved

🛜 https://Github.com/Clats97

---

Kyberlink.online ➡️ Quantum secure key exchange app ➡️ Github ➡️ https://Github.com/clats97/kyberlink

KeyBridge.online ➡️ RSA secure key exchange app ➡️ Github ➡️ https://Github.com/clats97/keybridge

ClatsGuard.online ➡️ Highly secure file encryption ➡️ Github ➡️ https://Github.com/clats97/

TextSecure.online ➡️ Best-in-class message cipher ➡️ Github ➡️ https://Github.com/clats97/textsecure

ClatOTP.online ➡️ Shannon Perfect Secrecy polyalphabetic text cipher ➡️ Github ➡️ https://Github.com/clats97/clatotp

---

🔒 Security Certificates & Cryptographic Integrity

✅ Valid SSL Certificates (ISRG Root X1, RSA-PKCS#1-4096-SHA-256)
✅ Valid Issuer: CN:D8, ORG: Let’s Encrypt
✅ Valid SHA-256 Fingerprints (certificate & public key)
✅ Valid Serials, CSAs, and Subject Keys — RSA-PKCS#1-4096 with exponent = 01 00 01
✅ All Deprecated Standards Disabled — no fallback to insecure protocols


---

🌐 Transport & Network Security

✅ TLS 1.3 Fully Enforced
✅ Strict-Transport-Security: max-age = 31536000
✅ Minimal Service Worker Scopes
✅ Mozilla Observatory Positive Score & Consistency Across All Apps

---

🧭 Browser & Front-End Security Headers

✅ Content Security Policy (CSP) — mitigates XSS and injection vectors
✅ X-Content-Type-Options: nosniff
✅ X-Frame-Options: DENY
✅ Referrer-Policy: strict-origin when-cross-origin
✅ Cross-Origin Policies Enforced: CORP, COOP, COEP = required same origin
✅ X-Permitted-Cross-Domain-Policy: value = NONE


---

🧱 Privacy, Data & Cookie Governance

✅ Deny-by-Default Policy: No permissions requested or required for online/offline operation
✅ No APIs Required on Frontend (minimal backend use, no logs or data retained)
✅ No Cookies Required for Core Functionality (session-only, non-persistent, valid cookie notices displayed)
✅ No Client-Side Data Retention or Requirements
✅ No Logs Retained and No Metadata Stored
✅ Local Only Execution: no external or untrusted scripts loaded
✅ Safe, Standard Google Fonts Only
✅ No Metadata or Associated Data Subject To Disclosure Under Subpoena Due To Impossibility Of Providing Data That Doesn't Exist


---

🧾 Compliance & Governance

✅ Exceeds Web Security and Privacy Standards Compliance
✅ Valid Cookie Notices and Policies in Effect
✅ All Security and Privacy Controls Enforced on Both Frontend and Backend


---

Copyright © Joshua M Clatney (Clats97) All Rights Reserved
---
All apps are open source and licensed under Apache 2.0
---
No warranties of any kind express or implied
---
Developer is not responsible for illegal or unethical use of the provided apps
---
All of the information provided by the developer is truthful and accurate within the bounds of good faith. If anyone would like to report any innacuracies or would like additional information about any of these apps, please contact [email protected]
---
/JC 2025-10-23