Comment by prophesi

The client is open source, and I believe the E2E encryption is done when the client creates a new Wireguard tunnel. At least, that's what I'm seeing here[0]. Still poring over the code.

[0] https://github.com/Sovereign-Engineering/obscuravpn-client/b...