BuffNet
Privacy
Hide as much as possible, and be honest about what cannot be hidden.
What is protected
- Your messages. Encrypted end to end. Devices that relay them cannot read them.
- Who sent it. Reticulum packets carry no source address, and we keep it that way.
- Later attacks. FrameBuff adds a post-quantum layer on top: a hybrid key exchange, then keys that keep changing. It covers FrameBuff traffic, not the public lobby.
- Your keys. On BuffLink hardware they are made inside a secure chip and never leave it.
Harder to track
- Radio IDs rotate, and each device has its own.
- Packets are padded to one size, so their length says less.
- On internet links, traffic is routed in layers, so no one relay sees both ends.
- A Base can send cover traffic, so real traffic is harder to spot.
Normal privacy is on by default. A "maximum stealth" setting uses more of these and costs more bandwidth.
What cannot be hidden
A radio signal can be located. Encryption hides what you send, not that you sent something from about here. If that could put you in danger, keep it in mind.
AI
Nothing that travels over the mesh is ever stored or used to train AI.