Sentlet for the web

Sentlet in a browser on your computer, at web.sentlet.com, linked to your phone.

Checking what you're sent

A web page's code comes from its server every time you open it. So that a break-in at our server would show, each release is listed here, on a website hosted elsewhere, with the fingerprint (the SHA-256) of its page.

That one fingerprint covers all of the release's code: the page names its script and its styles by their own fingerprints, and the script checks Sentlet's core the same way before running it. Browsers refuse any file that doesn't match. release.json, next to the page, lists the fingerprint of every file; its own is listed here too.

To check the page you're sent, compare its fingerprint with the newest release's:

curl -s https://web.sentlet.com/ | sha256sum

On Windows: curl.exe -s https://web.sentlet.com/ -o page.html, then certutil -hashfile page.html SHA256. Settings, in Sentlet for the web, shows which release you have.

Releases