Desktop app and local agent

Requests sent from the browser go out from our servers, so they cannot reach localhost or addresses like 192.168.1.20. The desktop app fixes that.

Install

Download the installer from the download page and run it. It installs for your user only and does not need administrator rights. Sign in with your usual account; your workspaces, collections and environments are the same as on the web.

The installer is not code-signed yet, so Windows may show Windows protected your PC. Click More info, check that the app is Sir, Post, then click Run anyway. You can compare the file with the SHA-256 shown on the download page.

Android: download the APK on your phone and open it. Android asks once to allow installs from your browser or file manager; allow it, install, and turn the setting off again if you like.

Linux: install the .deb from your software center or with sudo apt install ./file.deb, or make the .AppImage executable and run it.

Updates

From version 1.0.0 the apps check for a new version when they start and every few hours.

• Windows: a card at the bottom left says a new version is available. Click Update and restart: the update downloads, installs over the old version and opens Sir, Post again. Your sign-in and workspaces stay as they are. Click Later to be asked again next time.
• Android: the card says Download update and opens the new APK in your browser. Install it over the app you have.

Every desktop update is signed, and the app refuses an update whose signature does not match. Preview builds older than 1.0.0 do not update themselves: download 1.0.0 once from the download page.

Where requests go from

The status bar at the bottom shows Sending via Auto · This computer. In the desktop app every request leaves from your machine, with three exceptions that still go through the cloud:

• you are a viewer and the request uses secret values (viewers never receive secrets);
• the request uses Digest or NTLM authorization;
• you switch the sender to Cloud.

Variables, auth and the Signature Builder work exactly as on the web: Sir, Post fills them in on the server, then your computer sends the finished request. The send is saved in History with secrets masked and counts toward your daily limit.

Local agent for the browser

While the desktop app is open, it also runs a small local agent on your computer. Sir, Post in the browser finds it automatically and the status bar shows Auto · Cloud + local agent. Requests to localhost and private office addresses then go through the agent; everything else still goes through the cloud.

The agent only listens on your own computer (127.0.0.1), only answers Sir, Post itself, and only sends requests you start. Close the desktop app to stop it.