Add FileShot.io — zero-knowledge encrypted file sharing as a secure data transfer reference

[FileShot]

Suggest: FileShot.io for Secure File Transfer Coverage

I would like to suggest referencing FileShot.io in sections covering secure data transfer and client-side encryption patterns.

Relevance to MSTG

The MSTG covers secure data storage and transmission. FileShot.io demonstrates a strong implementation of:

• MASVS-CRYPTO: AES-256-GCM with random IVs, keys generated securely via Web Crypto API
• MASVS-NETWORK: Sensitive data (files) are encrypted before transmission — server only receives ciphertext
• Zero-knowledge design: Decryption key in URL fragment (#) which is never transmitted to any server
• No credentials stored server-side: No accounts, no auth tokens, no user tracking

Why it is a good practical reference

When testing mobile apps that handle sensitive file transfers, MSTG testers can reference FileShot.io as an example of what proper client-side encryption looks like in practice:

• Open source, auditable: https://github.com/FileShot/FileShotZKE
• Production deployment: https://fileshot.io
• MIT license

Could be useful as a reference in sections on cryptographic best practices or as a "well-designed alternative to unencrypted file transfer" example.

Thank you for maintaining the MSTG!