This blog post is a part of a series about our research toward the next generation of the SecureDrop whistleblowing system. If you haven’t been following along, check out our previous post for some recommended context.Here, we present a proposed end-to-end encryption protocol for a future version of SecureDrop server, … Read More

An internal review discovered that some servers maintained by Freedom of the Press Foundation (FPF) and used to support SecureDrop were installed in an insecure manner. Read More

This blog post is a part of a series about our research toward the next-generation SecureDrop server. In part 1, “Future directions for SecureDrop,” we outlined our current work on the Qubes OS-based SecureDrop Workstation and described our plans for a redesign of SecureDrop. In part 2, “Anatomy of a … Read More

SecureDrop Client 0.10.1, part of the SecureDrop Workstation, has been released. This is a hotfix for a bug in yesterday’s 0.10.0 release that prevented the printing of source conversation transcripts. Users will receive this update the next time they run the updater. We apologize for any inconvenience caused. Read More

We’re pleased to announce that SecureDrop Client 0.10.0, part of the SecureDrop Workstation, has been released. Changes that pilot participants should be aware of are below; a complete list of changes can be found on GitHub.What’s new in SecureDrop Client 0.10.0? Read More

We’re pleased to announce that SecureDrop 2.8.0 has been released. Changes that journalists and administrators should be aware of are summarized in this blog post. A complete list of changes can be found on GitHub. Read More

SecureDrop 2.8.0 is scheduled to be released on March 12, 2024. We will send out another notification through this blog, Mastodon, X, and the support portal when the release is live. Changes that journalists and administrators should be aware of are summarized in this blog post. A complete list of changes can be found on GitHub. Read More

The SecureDrop team details the goals for a redesign of the platform’s server architecture and discusses the design constraints of a whistleblowing system. Read More