Senditonthenet was born out of the requirement to send sensitive documents (such as personal identification documents, contracts etc) over the internet. Lets look at why the existing solutions weren't acceptable.
| E-Mail with encryption plugin | YouSendIt | Wuala | Senditonthenet | ||
|---|---|---|---|---|---|
| Safe when stored | ![]() |
![]() |
![]() |
![]() |
![]() |
| Safe from providers employees | ![]() |
![]() |
![]() |
![]() |
![]() |
| Works without software download | ![]() |
![]() |
![]() |
![]() |
![]() |
Your web browser encrypts your files before they are uploaded to our servers, we never see the unencrypted version. Your recipient can download and decrypt the files because the secret key for the files is shared with them during upload. To prevent interception the secret key is encrypted with your recipients public key.
Compare this with our competitors who handle your files unencrypted. Most then store your files on their servers leaving your files open to theft or abuse by that companies staff. Some chose to encrypt your files when they store them, but since they were the ones to encrypt them, they can also decrypt them. Think of it like locking your files in a safe, only to write the combination on the door!
All the code required for senditonthenet is sent to your web browser before you enter any login details. Therefore you can audit the code before you enter your password. We understand that people may not be able or willing to audit the code themselves every time they login. In this case you can still depend on the "distributed trust" that comes from knowing that other people are auditing the code, people unaffiliated with senditonthenet. Search for people mentioning @senditonthenet on twitter to see who has recently audited the code.
Compare this with Wuala, they encrypt your files before uploading, much like we do. However you have no way of knowing what the software they gave you actually does. Every time their software has an update, it is another attack vector. How would you know if they changed their software to upload your secret encryption keys to them?
Senditonthenet uses HTTPS to prevent your data from being intercepted during transport. Users must log in to download them.
Compare this with other services that email a link to your recipients. Anyone who can intercept that email (and thats potentially a lot of people) can also access that file. Some servies even generate links that can be easily guessed or iterated through. This means somebody could in theory simply download everyones private files, one by one.
Senditonthenet runs entirely within the web browser. Due to the advanced features required to achieve this we are limited to supporting only the most advanced web browsers such as Google Chrome 10+ and Mozilla Firefox 4+. For the technically minded we make use of SHA, RSA and AES.
For your security we recommend that you Get Chrome - It's free and is installed in minutes
To celebrate the launch of this service we are offering all services for free.
At some point in the future we may switch to a paid model, we will consult with our users to make sure we provide the service in a way which is fair for everyone.