Is Pondchat end-to-end encrypted?

Audio, video, and screen share travel peer-to-peer over WebRTC with DTLS-SRTP, so Pondchat servers never see media. Text chat is encrypted in the browser with AES-GCM using a key derived from the room name; the server relays and briefly stores ciphertext only. If a direct path fails, media may pass through a Cloudflare TURN relay, which forwards encrypted packets without decrypting them.

Why is Pondchat limited to 6 participants?

Each browser sends its stream to every other participant (mesh topology). Beyond about six peers, upload bandwidth and CPU grow too fast, so Pondchat caps rooms at 6 rather than adding a media server.

Does Pondchat use a media server or SFU?

No. Pondchat deliberately has no SFU and no server-side media processing or recording. Signaling runs on Cloudflare Workers and Durable Objects; media stays between peers.

Peer-to-Peer Security

Encrypted P2P Video Calling (WebRTC Mesh)

Direct peer-to-peer communication ensures your audio, video, and screen shares never route through or get saved on third-party media servers.

Experience True P2P Privacy

Direct DTLS-SRTP encryption with zero media recording.

The WebRTC Mesh Architecture

Pondchat connects every participant directly to every other participant using peer-to-peer WebRTC mesh topology.

DTLS-SRTP Media Streams

Video and audio streams are encrypted end-to-end between browsers using industry-standard DTLS-SRTP protocols.

Room-Key AES-GCM Chat

Text messages are encrypted in your browser with AES-GCM using a cryptographic key derived from the room name.

Where TURN fits in

About 10–20% of connections cannot find a direct path because of symmetric NATs or strict firewalls. Pondchat then relays packets through Cloudflare TURN. TURN forwards already-encrypted DTLS-SRTP packets and cannot decrypt them; it is a pipe, not a media server.

Threat model in one paragraph

Pondchat protects media and chat content from the Pondchat server and from anyone who is not in the room. It does not protect against a participant recording their own screen, a compromised browser, or someone who obtains the room link. Room links are capabilities: share them like passwords.