added docu

nodejs/doc/documentation.dox

@@ -79,6 +79,55 @@
 
     So I present here the safe chat program for dummies
 
+    @page design Design
+
+    Safechat is designed to provide a safe chat program for
+    dummies. Everything is simple to use, everything is strong
+    enrcrypted, everything is open source. You can chat and you can
+    write encrypted e-mails from the same address.
+
+    <a ahref="https://www.eff.org/de/node/82654">SafeChat provides</a>:
+      - Encrypted in transit ✓
+      - Encrypted so the provider can't read it ✓
+      - You can verify contacts' identities ✓
+      - Past communications are secure if your key is stolen ✓
+      - Code is open to independent review ✓
+      - Security design is properly documented ✓
+      - Audit not yet done, we invite you to audit our code ✗
+
+    @dot
+    
+    @enddot
+
+    @msc
+
+      user, browser, "safechat.ch", keyserver;
+
+      |||
+      --- [label="load homepage"];
+      user => browser [label="load https://safechat.ch"];
+      browser => "safechat.ch" [label="GET /"];
+      "safechat.ch" >> browser [label="index.html"];
+      browser => "safechat.ch" [label="GET /safechat.js"];
+      "safechat.ch" >> browser [label="safechat.js"];
+      ...;
+      browser -> browser [label="run safechat.js"];
+      --- [label="Create Account"];
+      browser => user [label="show create account"];
+      user >> browser [label="username, password"];
+      browser -> browser [label="create openpgp key pair"];
+      browser -> browser [label="locally store encrypted keys"];
+      browser -> browser [label="msg=encrypt(datetime)"];
+      browser -> "safechat.ch" [label="logon(username, pubkey, msg)"];
+      "safechat.ch" -> "safechat.ch" [label="datetime=decrypt(msg)"];
+      "safechat.ch" -> "safechat.ch" [label="verify datetime"];
+      "safechat.ch" => keyserver [label="lookup(username)"];
+      keyserver >> "safechat.ch" [label="not found"];
+      "safechat.ch" -> keyserver [label="upload(pubkey)"];
+      "safechat.ch" -> browser [label="logon success"];
+      browser -> user [label="ready to chat"];
+    @endmsc
+
     @page security Password and Secrets Concept
 
     Neither the password nor the private key are sent to the