Zero-Knowledge Architecture
Cryptographic Security & Anti-Hacking Layer
How NotePress prevents remote cyberattacks, Insecure Direct Object References (IDOR), and real-world physical screen inspections.
Cryptographic Token Auth
Every request is signed with HMAC-SHA256 tokens using timing-safe comparisons to prevent timing attacks. Users can never snoop on other users' message streams.
Sub-5ms Compound Indexing
PostgreSQL queries use compound B-Tree indexes on receiver, sender, and timestamp fields to ensure instant message retrieval without unindexed full table scans.
WebRTC P2P Calls
Voice and video streams connect directly peer-to-peer using DTLS-SRTP encryption, ensuring no intermediary server ever records or listens to call audio.
Privacy & Physical Snooping Comparison
Standard messengers only protect data in transit. NotePress uniquely protects against the #1 real-world threat: physical device inspection.
| Feature | NotePress | Signal | Telegram | |
|---|---|---|---|---|
| Disguised Notes UI & Icon | ||||
| Covert Gesture / PIN Unlock | ||||
| 1-Tap Sub-50ms Panic Exit | ||||
| Camouflaged Lockscreen Notifications | ||||
| Server-Side HMAC-SHA256 Token Auth | ||||
| WebRTC P2P Encrypted Calls | ||||
| Zero Advertising / Telemetry |