Engineering college student from California passionate about Digital Resistance. (Background in Amateur Radio, Cybersec and Competitive Programming)

State-level blocking is escalating across multiple countries. Telegram, WhatsApp, VPNs are gone one by one. I set up an MTProto + Xray server for someone close. It worked.

Additionally, Meta has recently removed E2EE, controversy about messengers spying on personal messages have been on the rise

But I kept thinking: why does this keep being a problem?

The answer is architectural. Every messaging app: Signal, Telegram, WhatsApp made the same decision: identity lives on their servers. Your phone number, your account, your social graph are under their control. One IP range to block. One company to pressure.

So I have been actively creating a whitepaper for Resonance.

The core idea is to separate identity from infrastructure. Your identity is a cryptographic keypair you own, not a phone number, not an account. Relay nodes route encrypted packets and provide mailboxing, but they never own your plaintext or social graph. If a node gets blocked, your identity migrates automatically. The route changes. You don't notice.

It's open-core. Protocol, SDK, CLI, and relay node are open source. You can run it on a VPS, a Raspberry Pi, a home server. Eventually also LoRa, mesh, radio fallback, satellites for when the internet itself goes down.

Built in Rust. PQC encrypted. Self-hostable. Decentralized

Would love feedback from this community, what is good and what is bad. Especially anyone who's dealt with censorship circumvention or self-hosted communication infrastructure.

GitHub: (recovering from a security breach right now that suspended my account and the rganisation)
You can also reach me via email!

Edit:

It is not only about censorship. It is that every communication system today routes your data through infrastructure owned by corporations or governments. Meta now even publicly discloses that your private Instagram messages are not encrypted! Telegram's servers own your message history, private keys and their code being closed source really does not show you how they might be using it, even if they claim to not be collaborating with any authority.. Even if the content is encrypted, the infrastructure layer is company's, they can also control your account, restrict access..