I'm the maintainer of StatiCrypt, a tool to password-protect static HTML pages without a back-end.

How I work and my values

I find myself trying hard to stay true to these values while working on the project:

1. be very transparent, including about my own limitations or past mistakes
2. learn and share about the underlying crypto, in an understandable way
3. write good documentation!
4. care a lot about backward compatibility and not breaking people's stuff

A good example of the first two might be issue #159, where we realized the number of PBKDF2 iterations was lower than recommended. I wrote a detailed report on what PBKDF2 are, what the practical implications were in the specific case of StatiCrypt, and what the remediation plan was.

I hope the documentation part can be seen in the readme, and backward compatibility can be seen in the mess that the code became at the end of version 2.x to account for all types of custom legacy password_templates before I found a way to make them backward compatible by design. 😅

What donations mean and how they'll be used

Donations are a mean to say thanks, and to support the project by boosting my motivation to work on it.

I quit my software developer job after 10 years to teach mindfulness meditation in French and having open-source support as a bump to my income is quite welcome - and it's good for the project if my mind associates StatiCrypt with pleasant things!

If you give something, please understand I take it with no strings attached - the software is still provided as is with no guarantee other than what's in the README. We're just shaping together an environment where working on StatiCrypt is more rewarding and thus more likely to happen.

Thank you very much if you feel moved to support my work, and may you be well either way! 🙏