Security model

Open mode (shipping demos) is not encryption, authentication, DRM, or a TLS replacement.

Need confidentiality today? Use real authenticated encryption first, then optionally represent ciphertext with Open-mode Doldskrift. Protected mode (DSK/3 / Gate) is the named encrypted product surface — refuse stubs today, AEAD not shipping; see ADR-0006.

Open — can frustrate

  • Casual visual inspection
  • Shoulder surfing
  • Immediate human comprehension

Open — cannot defeat

  • DOM / source inspection
  • Copy/paste
  • Reverse engineering
  • Determined analysts

Full SECURITY.md · Protected mode