Yes, it does cost me. For now, there is a 10MB limit. If this worked great, i will add a paid plan to upload big files. The payment would be done in crypto and cost will depend on the file size. In this way, i could keep the service running as well as protect the privacy and anonymity of the user

Thanks for the detailed and thoughtful reply — I really appreciate the time you took to lay this out.

I know Aaron Swartz — big fan.

You're right about many of these points. The biggest challenge with any web-based cryptography project is trust in code delivery, especially when it's dynamically served. That’s a fundamental limitation of browser-delivered JavaScript, and I fully acknowledge it.

You're also absolutely right that true zero-knowledge isn't just about encryption — it's about removing trust assumptions. The server still being able to serve malicious JS is a valid and well-known concern. That’s why I’ve made the code open-source and encourage self-hosting for anyone who doesn’t trust DeadDrop or me.

To clarify a few things:

-No JavaScript is sent after the file metadata is submitted — only the encrypted metadata and the file are transferred after the password is verified locally. I’m also planning to encrypt metadata (including filenames) to limit what the server can see.

-DeadDrop uses salted encryption. I'm using a proper key derivation function (PBKDF2) with a salt, which makes brute-force attacks significantly harder.

You’re right that unless users host the project themselves, they have to trust me — just like users of Signal technically have to trust their app stores and client builds. So, trust is a fundamental principal for a service like this and I promise the code that is delivered on the browser is same as on the github. However, if you don't trust my instance, you can review, fork, and self-host it easily.

I’m not claiming DeadDrop is flawless — just that it’s a sincere attempt to build a privacy-first, zero-knowledge file-sharing tool. I am truly grateful for your feedback, thanks again.

Fair point — I should’ve been more careful with the wording. I’ve open-sourced the code exactly so that people can audit, test, and critique it. I don’t expect blind trust, and I’m not claiming it’s perfect, just that I built it with privacy in mind.

If you have concerns, I’d genuinely appreciate feedback or a review. My goal is to improve it, not just promote it

China is the one of the most populated country in the world. It produces about 30% of all manufactured goods many of which is consumed by rest of the world. So yeah there is going to be some pollution. If we take about on a per-person basis countries like the U.S. still emit more. Moreover, China is the largest investor in renewable energy and China alone accounted for roughly 40% of the world’s renewable energy investment.

Absolutely not. DeadDrop is built with privacy and security in mind, strictly for legitimate, ethical file sharing. It’s designed to empower users to share sensitive but legal information safely, not for any illegal activity.

I do not support or tolerate any use of the platform for sharing harmful or illegal content like CSAM. If such misuse is detected or reported, the file will be permanently deleted and the IP address will be blocked.

Deadrop is open source. You can check out the source code here: https://github.com/Rayid-Ashraf/deaddrop

Yeah, that is the problem, If I started doing this, what is the point of being anonymous then.

Well, it is open source ( https://github.com/Rayid-Ashraf/deaddrop )

Thanks for the suggestions. I will consider it in future

I guess the people who care about privacy use Crypto. If i incorporated regular payment system, it will violate the core principle of the website i.e. to protect privacy and anonymity.

To be honest, there is not much I can do about it. However, if anybody found any illegal content, He/she can report it to me with name and password. I will verify the file and permanently delete it if their was anything offensive or illegal.

Well, everything has its own pros and cons

Look, problems like CSAM can’t be solved just by shutting down the platforms used to distribute it. If one site goes down, they’ll just move to another. Problems like this can only be solved by addressing the root cause. However, on my end, i will do my best to tackle this issue.

That’s definitely not the intention. It’s built for people who care about privacy, not for anything illegal.

Then, what are you gonna use, cash?

"C'mon, Chinese govt lifted 800 million people out of extreme poverty. Took the country from one of the poorest in a world to a world power. All this in just 4 decades and you expect the people to hate the govt."

I must admit send.vise.ee and deaddrop.space are both similar or I can say send-vis.ee is better. Deaddrop is still in its early stages of development, so if you guys have any suggestions or want anything that can make deadrop different. I am open to consider them.

Sorry about that — I recently open-sourced it and forgot to add the link. I’ll update it as soon as possible!

So with that logic, if a person reports CSAM to police. The police first has arrest the person who reported it. Am I right?

I want to be very clear: I do not condone CSAM or any illegal activity. DeadDrop is simply a privacy-focused file-sharing service — like many tools that value anonymity, it can be misused, but that’s not its purpose or intent.

To your question: I’m not trying to "avoid jurisdiction" — I’m trying to build a service that respects privacy and anonymity, which I believe are fundamental rights. Unfortunately, any privacy tool (from Signal to Tor) can be exploited. The challenge isn’t the tool itself, but how we handle misuse without compromising basic freedoms for everyone else.

If we shut down every tool that could be misused, we’d also be shutting down freedom of speech, press, and secure communication. That’s not a solution — it’s just pushing the problem elsewhere.