Abstract
This paper presents the design and development of a secure web-based chat application
that enables real-time communication with end-to-end encryption. The system facilitates
one-to-one and group messaging through a responsive web interface built using React.js,
while the backend is implemented with Spring Boot to manage authentication, data storage,
and business logic. Real-time message delivery is achieved using WebSocket technology,
ensuring seamless interaction between clients. To preserve user privacy, the application
incorporates end-to-end encryption, ensuring that messages are encrypted on the sender's
device and decrypted only on the recipient's device, making them inaccessible to
intermediaries including the server. Security measures such as password hashing and
Spring Security-based authentication are employed to safeguard user credentials. The
system architecture follows RESTful principles and supports scalability and maintainability.
This project demonstrates the integration of modern web technologies with robust security
practices to deliver a reliable and secure communication platform.
References
[1] R. Fielding and R. Taylor, 'Principled design of the modern Web architecture,' ACM
Transactions on Internet Technology (TOIT), vol. 2, no. 2, pp. 115–150, May 2002.
[2] M. Bishop, 'Introduction to Computer Security,' Addison-Wesley, 2005.
[3] T. Dierks and C. Allen, 'The TLS Protocol Version 1.0,' IETF RFC 2246, Jan. 1999.
[4] Spring Security Reference Documentation,
https://docs.spring.io/spring-security/reference/index.html
[5] React.js Documentation, https://reactjs.org/docs/getting-started.html
[6] WebSocket API, Mozilla Developer Network,
https://developer.mozilla.org/en-US/docs/Web/API/WebSockets_API