Webxdc - Secure mini apps for chats

Lobsters Hottest Tools

Summary

Webxdc is a secure, peer-to-peer mini app format for chats that runs offline with zero tracking, enabling private games and collaboration without servers or app stores.

<p><a href="https://lobste.rs/s/bilqbs/webxdc_secure_mini_apps_for_chats">Comments</a></p>
Original Article
View Cached Full Text

Cached at: 06/13/26, 08:56 PM

# Webxdc: mini apps shared in a chat Source: [https://webxdc.org/](https://webxdc.org/) ## ![Webxdc Logo](https://webxdc.org/assets/icon.png)webxdc Secure mini apps for chats ### Play games or collaborate, privately\. Supported by ## Private and peer\-to\-peer **🛡️ No tracking** Apps are sandboxed with zero internet access\. They can never phone home, track you, or leak data\. Verified by an[independent security audit](https://delta.chat/en/2023-05-22-webxdc-security)\. **🌿 Works offline** Mini\-apps run on the phones and devices of your chat partners only\. No servers needed\. Everyone can use mini apps while completely offline\. **❤️ No platforms** Webxdc is a community\-based mini app container format with a simple API\. The same app works everywhere, no[billionaire permissions needed](https://delta.chat/en/2025-01-23-webxdc-no-billionaires)\. **🕊️ Peer\-to\-Peer** Apps are shared peer\-to\-peer through your chat, and support[realtime collaboration](https://delta.chat/en/2024-11-20-webxdc-realtime), using[Iroh](https://iroh.computer/)in all chatmail clients\. ## Build your own mini app If you can build a web page, you can build a mini app\. Just zip your HTML, CSS and JavaScript into a`\.xdc`file and share it in a chat\. No hosting, no app stores, no user data to handle\. The chat messenger takes care of delivery, encryption and identity so your code can focus entirely on the user experience\. [Developer docs](https://webxdc.org/docs)

Similar Articles

Cloudflare OHTTP gateway

Hacker News Top

Cloudflare announced a closed beta for its new OHTTP Gateway, a self-serve paid add-on that lets customers behind Cloudflare receive Oblivious HTTP traffic while preserving separation of trust, and renamed its existing Privacy Gateway product to Cloudflare OHTTP Relay.

Apple changes full-disk access permissions to curb abuse from AI agents

Ars Technica

Apple is tightening macOS full-disk access permissions to prevent third-party developers and AI agents from misusing them to read users' private Messages, following controversy over Meta's Muse AI agent apparently referencing private conversations. Meta maintains the access was opt-in, while macOS security experts dispute that claim.

Updates to Full Disk Access in macOS

Hacker News Top

Apple is introducing stricter controls over Full Disk Access in macOS as AI agents become more autonomous, requiring explicit user consent for apps that need extraordinary system access.