From: Ardis Lu <ardisglu@gmail.com>
Date: Sun, 20 Jul 2025 07:34:17 +0000 (-0700)
Subject: Set domain to `108117.xyz`
X-Git-Url: https://git.ardis.lu/?a=commitdiff_plain;h=56035fb844f95f7c22c6dee443a366501280d0a1;p=static-encrypt-passkey

Set domain to `108117.xyz`
---

diff --git a/README.md b/README.md
index c23e04a..7fe613d 100644
--- a/README.md
+++ b/README.md
@@ -3,3 +3,14 @@
 A tool to encrypt and decrypt any static content **using passkeys**.
 
 Use [static-encrypt](https://github.com/ardislu/static-encrypt) to encrypt using a password instead of a passkey.
+
+## Why `108117.xyz`?
+
+The Web Authentication API ties passkeys to a "relying party," which is typically the domain. A standalone domain reduces the risk of mixing single-use encryption passkeys with "real" passkeys used for other domains.
+
+The domain name was picked to be within the cheap [`.xyz` 1.111B Class](https://gen.xyz/1111b) and is equal to:
+
+```javascript
+[...new TextEncoder().encode('lu')].join('');
+// "108117" 
+```
diff --git a/index.html b/index.html
index a575fdd..99dd3a7 100644
--- a/index.html
+++ b/index.html
@@ -8,8 +8,8 @@
   <meta property="og:title" content="static-encrypt-passkey">
   <meta property="og:description" content="A tool to encrypt and decrypt any static content using passkeys.">
   <meta property="og:type" content="website">
-  <meta property="og:url" content="https://static-encrypt-passkey.ardis.lu/">
-  <link rel="canonical" href="https://static-encrypt-passkey.ardis.lu/">
+  <meta property="og:url" content="https://108117.xyz/">
+  <link rel="canonical" href="https://108117.xyz/">
   <link rel="icon" href="data:,">
   <title>static-encrypt-passkey</title>
   <link href="./style.css" rel="stylesheet">