This server forwards messages between clients. It does not read them. Every client encrypts its own messages before sending (X25519 key exchange + NaCl Box / XSalsa20-Poly1305); the relay only ever sees ciphertext and the two address strings involved. There are no accounts and no passwords - you pick any address string you like and use it, or derive one from your own public key if you want it to actually mean something (see self-certifying identity).
The protocol reference covers every message type, every field, and worked examples in JavaScript and Python. It documents only what a client needs to interoperate with this relay - not the relay's own implementation.
Live, interactive demos - separate pages, full applications. See the demos catalog for how each one works and how to reproduce it.
Not a web page - a terminal client in chat_cli.py doing the same X25519/NaCl Box encryption as the whisper demo, from a real terminal instead of a browser; see cookbook 7i.
A raw, unopinionated console wired directly to the relay over the same WebSocket port everything else on this page uses. Type a JSON request, hit send, see exactly what comes back - useful for exploring the protocol without writing any client code first.
connecting...
try, in order: {"t":"register","addr":"test123"}, then {"t":"subscribe","topic":"demo/#"}, then from a second tab/console {"t":"publish","topic":"demo/x","ct":"hi"} and watch it arrive here.
There is nothing secret here - no password protects "using" the relay, since anyone can register any address. The only thing that is actually secret is each client's own private key, which never leaves that client.
| Transport | Host | Port | TLS | Notes |
|---|---|---|---|---|
| TCP | nowwx7.work | 8443 | yes (Let's Encrypt) | 4-byte length-prefixed JSON frames |
| WebSocket | nowwx7.work | 8444 | yes | primary WS endpoint |
| WebSocket | nowwx7.work | 443 | yes | fallback port for networks that only allow outbound HTTPS; same socket also serves this page over plain GET |
| UDP | nowwx7.work | 8445 | no (payload is still E2E encrypted above this layer) | requires a session token returned at registration |
Certificate: real, publicly trusted (Let's Encrypt) for nowwx7.work. Standard certificate verification works in every client - never disable TLS verification to talk to this relay, it is never necessary.