Decentralized Encryption Tools
End-to-end and threshold encryption schemes with no single key holder.
Beyond transport security (TLS on every API from first start, mutual TLS for Raft, WireGuard between hosts), Decentralized.Host has no encryption feature. Volume data is not encrypted at rest by the system.
End-to-end vs. threshold encryption
End-to-end encryption (E2EE) means the message is encrypted on the sender's device and only decryptable on the recipient's -- the transport in between, including any server that relays it, never sees plaintext. Threshold encryption is a different, additive idea: the DECRYPTION key itself is split into N shares distributed to different parties, and some threshold (e.g. 3 of 5) must cooperate to reconstruct it -- useful when you deliberately don't want any single party (including the sender) to unilaterally decrypt later, common in multi-party custody and some DAO treasury designs.
End-to-end and threshold encryption schemes with no single key holder. Beyond transport security (TLS on every API from first start, mutual TLS for Raft, WireGuard between hosts), Decentralized.Host has no encryption feature. Volume data is not encrypted at rest by the system.