Security Architecture of entrop11c.dev
An overview of our zero-trust opsec baseline, serverless contact pipeline, and PGP encryption model.
Security Architecture & Opsec Baseline
Welcome to entrop11c.dev. This platform is engineered with a strict zero-trust operational security posture and hybrid terminal interfaces.
1. Client-Side Cryptography & PGP Contact Portal
Communication sent via the contact portal uses client-side PGP encryption powered by OpenPGP.js before dispatch.
- Public Key:
06F1BF7065ACEB88([email protected]) - Verification: Proof-of-Work (PoW) SHA-256 challenge solved client-side to mitigate automated spam.
2. Terminal TUI Decryption
For operator convenience, local decryption is decoupled from public infrastructure and handled directly via the command-line TUI (npm run tui or node scripts/contact-tui.js), leveraging native gpg binary and gpg-agent integration.
3. Strict Security Headers
- HSTS enforced
- Strict Content Security Policy (CSP)
- X-Frame-Options: DENY
- X-Content-Type-Options: nosniff