Send’s official instance will be terminated by May 24. Could Privacy Guides plan on hosting an instance? [image] Send Encrypt and send files with a link that automatically expires to ensure your important documents don’t stay online forever.

An update on this: At least for the next year, we were able to save Tim’s instance through a generous sponsorship from Thunderbird. The banner on the official instance about its imminent termination has also been removed.

This seems like an easy of enough change. All in favor for it personally

Costs are getting too high to keep hosting this service. I wonder what their costs actually are?

Maybe a link to the official list of public instances instead? Edit: scratch this idea. There dev notes that there is no way to verify the instances for security/privacy. The best option is for another trusted group to fill the void or of course self hosting.

I think ultimately all of these instances will fall to the original reason Firefox Send was discontinued: Unfortunately, some abusive users were beginning to use Send to ship malware and conduct spear phishing attacks. This summer we took Firefox Send offline to address this challenge.

This is why we cannot have nice things.

[image] Weewaawoo: There dev notes that there is no way to verify the instances for security/privacy. We need to look into whether using the ffsend CLI tool eliminates the need to trust the instance, because if that tool performs the encryption before upload the risk is very reduced.

ffsend uses client side encryption, to ensure your files are securely encrypted before they are uploaded to the remote host. This makes it impossible for third parties to decrypt your file without having the secret (encryption key). The file and its metadata are encrypted using 128-bit AES-GCM , an…

But anyone with the url can decrypt the file which would mean the server stores the private key. This wouldn’t be e2ee and would still require trust of the server. As far as the “optional” password it sounds like this happens outside of the encryption. Does it wrap it in another layer of encryption …

Sorry for the late reply. If one only uses the command line ffsend tool without visiting the hosted instance, the instance never gets the encryption secret, which is stored behind the hash of the URL that can be shared. Using the hosted instance with the website instead of the ffsend command line to…

This is excellent news. Thanks for explaining.

Privacy Guides Community

Remove the statement about Send's official instance

Site Development

redoomed1 May 28, 2025, 1:47am 13

The official instance now shows a termination date of June 7th.

Following the information provided by @any1, I think we can do more than just remove the statement about Send’s official instance:

Topic		Replies	Views
Add Send (Firefox Send fork) to the File Sharing and Sync Page Tool Suggestions completed	26	2343	November 13, 2022
Astermail E2E email, anyone heard of it? General	37	717	March 31, 2026
I deployed a new public Invidious instance Project Showcase	6	558	April 10, 2026
Remove Send Tool Suggestions rejected	3	595	January 22, 2024
Mention services server code availability Site Development	2	199	November 29, 2024

Privacy Guides

Massive organizations are monitoring your online activities. Privacy Guides is your central privacy and security resource to protect yourself online.

Privacy Guides is a non-profit, socially motivated website that provides information for protecting your data security and privacy.

We do not make money from recommending certain products, and we do not use affiliate links.

Knowledge Base

Private Web Browsers

Top VPN Providers

Privacy-Respecting Services

Software Recommendations

More Resources

Remove the statement about Send's official instance

Related topics