Obscura is a VPN built so the provider cannot log user browsing activity by design: traffic from a device is end-to-end encrypted with WireGuard to an independent exit hop (operated by Mullvad) and relayed through Obscura’s front-end servers over QUIC. Obscura’s servers act as NAT relays and cannot decrypt WireGuard packets because they’re encrypted to the exit hop’s public key, while the exit hop never sees the user’s real IP. The service eliminates account identifiers by using randomized account numbers (no email or phone required), accepts privacy-preserving payments (Bitcoin Lightning, Monero, or card), costs $8/month, and allows five simultaneous connection slots. Apps exist for iOS, macOS, Android, Windows and Linux; WireGuard configs are available but sacrifice QUIC-based obfuscation.
Technical claims include a “two-party” relay protocol (WireGuard-over-QUIC) that blends with normal HTTP/3 traffic to resist censorship and detection, and avoids TCP-over-TCP issues via QUIC’s datagram support. The code is open on GitHub with planned reproducible builds, and the app shows exit hop WireGuard keys for verification. Server infrastructure spans many relay and exit locations worldwide. The macOS client uses a sandboxed Network Extension (no kernel access). The design contrasts with standard “no-logs” or multihop VPNs by ensuring no single party can correlate identity and traffic.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.