Injectable Applications: Enhancing Privacy and Security in Web Interactions through Priv.ly

This paper introduces Priv.ly, a novel web privacy architecture that enables the injection of privacy-preserving applications, termed Injectable-Apps, into untrusted web platforms. Priv.ly decouples content from host platforms by using C-Servers to store and manage data, ensuring that sensitive information is protected from unauthorized access. Injectable- Apps leverage various cryptographic techniques, including symmetric and public key cryptography, to safeguard user data across different communication channels. The architecture also addresses potential security threats such as spoofing, content tracking, and distributed denial-of-service (DDoS) attacks by implementing robust mitigation strategies. By allowing users to manage their cryptographic identities and control key distribution, Priv.ly empowers them to protect their privacy in a flexible and user-friendly manner. This paper discusses the design principles, security implications, and potential use cases of Priv.ly, highlighting its ability to integrate seamlessly with existing social networks and web applications.