BurritoShare Hides Encryption Key in URL Fragment for Zero-Config E2E File Sharing

generativist · x · 2026-08-21

BurritoShare, a browser P2P file transfer tool by a16z's Martin Casado, uses a clever trick: both ends connect to a relay over WebSocket, but the encryption key lives in the URL's #fragment — which browsers by spec never send to servers — so a simple copy/pasted link yields end-to-end encryption with zero config.

The poster had planned to set up Tailscale instead; this needs no account, has no size limits, and files never touch the server.

Related event: BurritoShare Uses URL Fragments for Zero-Config E2E Encrypted File Sharing(2 posts)→

Original post →

More from Fun

Fun channel →