AskForKey

AskForKey lets you ask someone for a password, API key or certificate without it ever passing through email or chat. You send a single-use link. The other person’s browser encrypts the secret to your workspace’s public key (P-256 ECDH, HKDF-SHA-256 and AES-256-GCM through the Web Crypto API), and you decrypt it once, in your own browser. The server only ever holds ciphertext. The person sending the secret needs no account.

The whole product runs on bunny.net in Europe: edge scripts on Deno serve the API and the public submit page, Bunny Database holds the relational state, Storage zones hold the ciphertext and the static sites, and Bunny DNS handles the domains. It is in closed beta.