Publish
Creators want their work to be seen, discussed, and enjoyed by real audiences.
For creators who still want to share
Share your work with people.
Not with every machine that asks.
Publishing online should not automatically grant scrapers, bulk collectors, and AI training pipelines unrestricted access to your work. Share Capsules helps you protect images, publish them on your site, and decide when they can open.
An honest boundary: no technology can prevent an authorized viewer from copying what they can see. The goal is to make effortless, anonymous, large-scale access harder—not to promise impossible DRM.
-
Content
Encrypted locally
-
Policy
Creator-defined
-
Hosting
Encrypted only
-
Viewer
Policy-gated
Access architecture
How an encrypted Capsule becomes viewable
Capsule
Encrypted content + trust policy
Trusted Viewer
Reads the policy and coordinates access
CTX protocol
Trust Provider
1. Evaluates the policy
Key Broker
2. Releases a wrapped key
The problem
The web asks creators to choose between reach and control.
Public work is easy for people to discover—and just as easy for automated systems to scrape, aggregate, archive, republish, and train on without meaningful permission.
Lose control
A public URL usually gives human visitors and industrial harvesters the same access.
Accept lock-in
Private platforms add gates, but often require the creator to surrender hosting and audience relationships.
What we are building
Encrypted content with creator-defined access.
Share Capsules separates protected content from public hosting. Creators secure the work, publish the encrypted file where they choose, and let the Viewer ask trusted services whether the work should open.
01
Secure content
The creator tool turns the original work into a Capsule: encrypted content plus a custom trust policy.
02
Publish content
The encrypted Capsule can be hosted on an ordinary website chosen by the creator.
03
View content
A trusted Viewer checks whether the visitor meets the policy before decrypting and rendering the original work locally.
Capsule Trust Exchange (CTX) is the open protocol behind that approval step. It lets a Viewer ask whether the creator’s access rules are met without exposing the Viewer’s raw account history to the creator or Host.
The complete journey
From original work to a trusted viewing session.
Share Capsules separates the act of publishing from the decision to unlock. Creators keep their work portable, while Viewers open it through trusted services that check access before anything protected is shown.
Creator workflow
Step 1
Content creation
The creator makes the work with the tools they already use, whether that means images, video, HTML, PDFs, or another format they want to share more intentionally.
Creator workflow
Step 2
Capsule creation
The creator tool wraps the work in an encrypted Capsule and signs the trust policy, so the package carries clear instructions about how it may be opened.
Creator workflow
Step 3
Publish capsule
The encrypted Capsule can be placed on an ordinary website. The Host can share the file, but it cannot read the protected content inside it.
When someone visits the hosted page
Viewer workflow
Step 4
Connection
A Viewer connects through the official tool, reviews the access requirements, and chooses whether to opt in to this Capsule’s trust policy.
Viewer workflow
Step 5
Policy check
A trusted provider checks only what this Capsule requires, such as account status, consent, limits, or creator-selected conditions.
Viewer workflow
Step 6
Key release
If access is approved, the broker releases a one-time opening key to that connected Viewer. The Host never receives it.
Viewer workflow
Step 7
Decryption
The Viewer opens the Capsule locally and shows the protected work inside its own trusted viewing surface.
Capsule access rules
One Capsule format, several ways to decide when it opens.
Capsules can be configured with time, limit, and trust policies. These policies can be used alone or combined to define the access rules for decryption. The Viewer opens the encrypted content only when every required policy is satisfied.
A Time Capsule, Limit Capsule, Trust Capsule, or Combined Capsule allows creators to configure how they want their protected content shared.
Time Capsule
Allows creators to set opening and closing dates. The Capsule opens only during that configured access window.
Limit Capsule
Allows creators to limit how many times protected content can be viewed, either across all viewers or per viewer account.
Trust Capsule
Allows creators to require a viewer trust check before content opens. The trust score considers recent usage patterns and quick human challenges that help distinguish people from bots.
Combined Capsule
Combines selected rules so time, limit, and trust requirements must all pass before the key is released.
At viewing time
Opens normally
The current time, counters, account, device, and trust checks satisfy the signed policy.
Locked by rule
A time window has not started, has ended, or an opening limit has already been reached.
Quick check needed
The viewer is otherwise eligible, but current confidence is too low to release the key yet.
Blocked for risk
Recent high automation-risk behavior can keep access blocked even if a challenge is attempted.
Trust checks help reduce automated access, but they are not a perfect guarantee. They do not prove that a viewer is a unique person, generally trustworthy, or guaranteed to use the content well.
Open protocol, trusted providers
Anyone can build. Official tools choose carefully.
Independent projects can build with Capsule and CTX. The official Share Capsules tools use approved network services by default, so creators and viewers are not asked to rely on random providers just because they appear on a web page.
How trust works
Trust, without a universal trust score.
CTX does not decide whether someone is a “good” or “trustworthy” person. It checks only the conditions the creator set for this Capsule, using information the Viewer agrees to share.
-
01
Creator chooses
The Capsule carries the creator’s signed access conditions.
-
02
Viewer consents
The Viewer decides whether to disclose the evidence needed for this request.
-
03
Provider evaluates
The provider returns a limited policy result rather than a raw account history.
A policy may ask for
- Verified active account
- Registered Viewer device
- Account continuity
- Per-Capsule limits
- Low automation risk
- Optional community standing
The creator receives the policy result—not the Viewer’s email, identity, complete history, or raw evidence.
Recognized services
Official Viewers only work with services the network recognizes. If a service is no longer trusted, the Viewer can stop before sharing private account information or opening the protected work.
Designed for clarity
Security without mystery.
Each part has a bounded job, so creators and viewers can understand who sees what.
Host website
Serves public fallback and opaque encrypted Capsule files.
Trusted Viewer
Validates, authorizes, decrypts, and renders in an isolated surface.
Official registry
Identifies which providers and brokers the official tools recognize.
CTX Protocol
Coordinates the Viewer, provider, and broker requests without giving the Host plaintext access.
Trust Provider
Evaluates the exact creator-signed policy using consented evidence.
Key Broker
Releases only the ticket-bound content key to the registered device.
Available now
Secure image sharing is ready to use.
Create an account, protect an image, publish the protected Capsule on your site, and let eligible viewers open it with the Share Capsules Viewer. The hosted Share Capsules services handle the account, access, and key-release steps for the supported V1 flow.
- Protect images
- Turn supported image files into protected Capsules that can be published on ordinary web pages.
- Choose access rules
- Use open access, date windows, opening limits, revocation, and trust checks depending on how you want the image to be shared.
- Use the hosted service
- You do not need to run your own servers for the supported flow. Share Capsules provides the account, access, and key-release services.
- Still coming later
- More content types, more browsers and devices, more provider choices, and more advanced publishing workflows.
TekFoundry sponsors and currently develops the Share Capsules reference implementation.
Open participation
Built in public. Improved through scrutiny.
Capsule and CTX are intended to support interoperable implementations—not make TekFoundry the only possible provider or broker. Creators, implementers, privacy advocates, and security reviewers are invited to question the assumptions and improve the design.