4.4. Privacy properties in the MVP

In its current form, Obscura provides a specific and narrow set of privacy guarantees.

Message content is end-to-end encrypted and unreadable to the backend. The service operator cannot decrypt stored messages. There is no dependency on phone numbers or emails for identity.

At the same time, the MVP accepts that metadata is still visible at the routing layer. This is a conscious trade-off made to keep the system usable, understandable, and auditable in its first iteration.

The important part is that content privacy is already a fixed property of the system. It does not depend on optional settings or future upgrades. Even if no further work is done, the backend remains blind to message content.

From that base, stronger privacy techniques can be layered on later. But the core rule — that message meaning never leaves the client — is already enforced.

Last updated