Comment by Reubend

Comment by Reubend 2 days ago

3 replies

I'm not clear on the technical details here.

> Obscura’s servers relay your connection to exit servers but can never decrypt your traffic.

Doesn't that rely on us trusting that the server runs the code they claim it does? Or is there a way to prove that their server can't get the decryption key (i.e. by proving that it's not possible for them to switch the final hop, or add undisclosed hops in between)?

dongcarl 2 days ago

(Carl from Obscura here)

Here's what [one of our FAQ entries](https://obscura.net/#faq-trust) say:

> Additionally, our app displays your current exit hop’s WireGuard public key on its “Location” page. You can check this key against what Mullvad publishes [here](https://mullvad.net/servers) to ensure that you’re connected via a genuine Mullvad exit hop!

Let me know if that's unclear!