Aegis Http GPG Login

About

Aegis HTTP is a secure, open-source browser extension designed to bridge your browser web requests with your local GnuPG (GPG) agent via the Chrome Native Messaging API. 
Designed for developers, privacy advocates, and security-focused organizations, Aegis HTTP enables seamless, passwordless logins and end-to-end (E2E) payload encryption without exposing your secret keys to the web.
Key Features:
- Passwordless Challenge Signing: Log in securely to supporting web applications by signing cryptographic challenges using your local GPG keys.
- E2E Request/Response Encryption: Automatically encrypt outgoing request bodies and decrypt incoming responses transparently using standard GPG.
- In-Memory Public Key Caching: Never pollution your GPG keyring. Aegis dynamically utilizes public keys for isolated session encryption without permanent imports.
- Subkey Wizard: Automatically detects if your GPG key lacks an encryption subkey and guides you through generating one locally and securely (RSA, Curve25519).
- Anti-Replay Protection: Enforces timestamp and nonce validation on all cryptographic messages to prevent reply attacks.
How it works:
Aegis HTTP intercepts registered gateway requests and communicates with a lightweight, secure native host running on your operating system. The native host interfaces directly with your local GnuPG command-line utility, ensuring your private keys never leave your machine.
Source Code & Documentation:
Aegis HTTP is fully open-source under the AGPL-3.0 License.
For installation guides, developer integration playbooks, and native host daemons, visit:
https://aegishttp.github.io/