Containerized, decentralized, and distributed web applications with end-to-end encryption

A network device configured to implement a relay server for facilitating communication between a web application executing in a web browser of a source computing device and one or more client computing devices, the network device comprising:

• one or more processors;
• and
• a non-transitory machine-readable storage medium storing instructions that, when executed by the one or more processors, causes the relay server to:
• receive a selected domain name under which the web application executing in the web browser is to be registered and an identity string that is claimed by the web application, wherein the web application is executed entirely in the web browser,
• verify that the web application is allowed to be registered under the selected domain name based on accessing a record associated with the selected domain name in a domain name system (DNS) database and verifying that the record associated with the selected domain name references the identity string, wherein the identity string is separate from a network address associated with the web application,
• register the web application under the selected domain name in response to verifying that the web application is allowed to be registered under the selected domain name,
• relay messages associated with the selected domain name that are received from the one or more client computing devices to the web application over a first bidirectional communication connection established between the web application and the relay server,
• relay second messages received from the web application over the first bidirectional communication connection to respective ones of the one or more client computing devices,
• receive a request from the web application over the first bidirectional communication connection to execute a particular code provided by the web application when the relay server receives requests at the selected domain name, and
• register a handler for executing the particular code provided by the web application without involving the web application when the relay server receives the requests at the selected domain name.

A non-transitory machine-readable storage medium storing instructions that, when executed by a network device implementing a relay server, causes the relay server to perform operations for facilitating communication between a web application executing in a web browser of a source computing device and one or more client computing devices, the operations comprising:

• receiving a selected domain name under which the web application executing in the web browser is to be registered and an identity string that is claimed by the web application, wherein the web application is executed entirely in the web browser;
• verifying that the web application is allowed to be registered under the selected domain name based on accessing a record associated with the selected domain name in a domain name system (DNS) database and verifying that the record associated with the selected domain name references the identity string, wherein the identity string is separate from a network address associated with the web application;
• registering the web application under the selected domain name in response to verifying that the web application is allowed to be registered under the selected domain name;
• relaying messages associated with the selected domain name that are received from the one or more client computing devices to the web application over a first bidirectional communication connection established between the web application and the relay server;
• relaying second messages received from the web application over the first bidirectional communication connection to respective ones of the one or more client computing devices;
• receiving a request from the web application over the first bidirectional communication connection to execute a particular code provided by the web application when the relay server receives requests at the selected domain name;
• and
• registering a handler for executing the particular code provided by the web application without involving the web application when the relay server receives the requests at the selected domain name.