NotifyBridge is designed to work locally and securely.
Notifications are sent directly from Android to macOS over the local network.
NotifyBridge does not use:
- Cloud servers
- Remote relay services
- Analytics backends
- Push notification infrastructure
During QR pairing, the Android app stores a shared secret generated by the Mac app.
This secret is used for encryption and request signing.
Notification payloads are encrypted using:
AES-256-GCM
The notification title and body are not sent as plain JSON over the network.
Requests are signed using:
HMAC-SHA256
Each request includes:
- Timestamp
- Nonce
- Signature
The Mac verifies the signature before decrypting the payload.
Requests include a timestamp and nonce. The Mac rejects expired requests to reduce replay risk.
NotifyBridge protects against casual local network inspection and unauthorized notification posting without the pairing secret.
It is not intended to replace enterprise-grade device management or end-to-end authenticated identity infrastructure.