server

A zero knowledge server for self-hostable + secure storage platform.

---

Note

The zero-knowledge architecture is the long-term target. Client-side encryption and certificate pinning (and the client itself) are planned but not yet implemented. To see features under development see issues

Features

1. Zero Knowledge Host

   The server knows nothing that could identify

   • The user or their client
   • Any file stored by the user. Server only stores file-size, hash and the user who owns it.
   • Every file uploaded is client-side encrypted — including its MIME type, metadata, and content.
2. Certificate Pinning *

   All connections use https with a self-signed X.509 certificate generated on first boot. The certificate fingerprint is verified physically — out-of-band — before any connection is established. No certificate authority needed. And this all happens on a localhosted network.

3. Low-Resource Design

   Kosh is built to run well on hardware most people have already written off. Reference deployment targets:

   • A 2nd-gen Intel Sandy Bridge box with 2GBs of RAM
   • A Chromebook with MediaTek MT8183 and 4GBs of RAM
   If it's fast there, it's fast anywhere.

* - Planned. May change as the project evolves.