CUBE Contact · Firefox plugin
CUBE Contact is a Firefox add-on that sends messages, groups, signed pages and listings through a relay that cannot read them. There is no account and no phone number. The plugin you download is the product; everything stays on your machine. No domains and no hosting fees for your own pages. Secure your unique handle name by registering today!
Banned in countries with U.S. encryption export restrictions.
The whole product is a browser add-on: load it, pick a handle, connect to a relay. Works on Windows, macOS and Linux, and on Firefox for Android. No installer, no background daemon.
Every message is sealed with a hybrid X25519 + ML-KEM-768 handshake and AES-256-GCM. The relay routes sealed cells by coordinate; it sees who talks to what coordinate, never the content.
Your identity is a 32-byte seed kept in the extension's own storage. The handle is a name at a relay, not a login.
Records in the browser store are sealed with a key derived from your identity. A copy of the store without your key is unreadable.
One-to-one sealed messages. If the other side is offline, the relay keeps the sealed envelope up to seven days (thirty at most) and hands it over when they return.
A group is a local list that fans out one sealed envelope per member through the relay. Membership stays on your machine.
Publishers can list a signed page in the relay index. Search by host, title or summary, see the page's five-star average, and rate pages as you use them — signed ratings the relay cannot forge.
Read sealed pages from your store in a sandboxed viewer. A page is signed by its publisher; one changed byte and it is refused.
The middle is deliberately dumb: it pairs sealed circuits by CUBE coordinate, keeps a bounded mailbox for envelopes addressed to someone who is offline, and holds the public listing index. It never holds an account record, a contact list, or anything it can read. The one thing it keeps on purpose is a sealed envelope for an offline friend, bounded in time, deleted on delivery or expiry.
The comparison below is the honest one: an IRC server anchors identity and state; this relay anchors nothing but a route.
| Axis | IRC | CUBE Contact |
|---|---|---|
| What the middle sees | The full message stream, channels, nicks, user accounts. | Sealed cells, addresses, timing and sizes — never content. |
| Identity | Registered nickname, often an email or account. | A 32-byte key; a handle is a name at a relay, not a login. |
| Channels | Server-side channel state and history. | Groups are a local list; each member gets a sealed envelope. |
| Offline delivery | The server buffers (or loses) messages. | The relay holds one sealed envelope up to 30 days, then forgets it. |
| Trust anchor | The server is the state. | The relay is a pipe; the keys are yours. |
After the trial: $19 a year — the store, the relay service it uses, listings, ratings and signed pages.
Download cube-contact-firefox-0.2.3.zip260 KB · sha256 e1d3cbe7b4fc98d52144263476302a45f5431cbde40075357197ffad647f6f33
about:debugging#/runtime/this-firefox in Firefox.cubelinux.com/relay is the public one), then Save & connect.When you buy a licence, paste the device key the extension shows under Identity into the checkout form.
A temporary add-on is removed when Firefox restarts: load it again while the build is unsigned. The download link stays at this page; the desktop build (with voice and video) is still on the whitepapers page as a separate evaluation.
The full plugin, thirty days from first launch. No account, no card. The trial is a record in the app; the clock is local.
After the trial, $19 a year: the store, the relay service it uses, listings, ratings and signed pages. Cloud messengers are free because they are funded by what they read; service without reading is not.
A paid licence is a signed Ed25519 record held in the app, verified offline. No phone-home; the software only asks for it once the trial ends.
A paid licence is a signed Ed25519 record held in the app, verified offline. No phone-home; the software only asks for it once the trial ends.
Trials end; this is how a licence begins — or pay early, any time. Stripe handles the card; we never see it.
After paying, the signed licence record is minted and delivered straight to the CUBE handle you enter at checkout — automatically, from our relay host, once Stripe confirms the payment. It is one signed record, not an account; the app verifies it offline and never calls home. No email step, nothing to send us.