Security

Yeetline is built so that the server relays messages it cannot read. This section is where the project says, in one place and without selling it, what that does and does not protect, what has been checked and by whom, and how to tell us when something is wrong.

• Who we defend against is the threat model: the people who might attack, what each can and cannot do, what the server can see, and what each part of the app protects and does not.
• Our own security review is what the project found when it attacked its own cryptography, what it fixed, what it could not, and the commands to run the checks yourself. It is an internal review, not independent.
• Reporting a security problem is the standing invitation to outside researchers: what is in scope, how to reach us, and what we promise.

Two things are true of everything in this section. It was written by the people who build Yeetline, and nobody outside the project has checked it. And it makes no comparison with any other product: where it says something is protected, it names the property, and where it says something is not, it says that too.

Last changed 2026-10-19