$ newsletter

This is the full-article reader for my newsletter. The preview is in your email; open its personalized link to unlock the complete article automatically.

If the link doesn't work, enter the article ID and key from the email below.

---

$ unlock

article id key $ decrypt

---

$ how this works

• → the key stays in the URL fragment. The link uses #id.key, not a query parameter. Browsers don't send the fragment to the server, and the page removes it from the address bar after loading.
• → the article is decrypted in your browser. Each encrypted file uses AES-GCM with a random salt and IV. A wrong key fails authentication instead of producing unreadable content.
• → the article ID isn't the secret. Encrypted files live at /encrypted-newsletters/<id>.bin; the key is what protects the contents. Use a long, randomly generated key.