Obscura trust 2-party relays and QUIC
Obscura argues that ordinary consumer VPNs concentrate too much trust in one provider: the provider can know both the user’s identity and the user’s traffic metadata.
Its proposed trust split uses a two-party relay design. The first hop sees the user’s network address but not the plaintext traffic. The exit hop handles the internet-facing traffic but does not see the user’s direct network address.
Obscura combines that relay split with QUIC-based tunneling so the traffic resembles common HTTP/3 traffic and avoids the performance problems of tunneling TCP over TCP.
For a privacy-service bundle, the relevant lesson is architectural: privacy can improve when duties are split between parties with deliberately incomplete views. The same idea can apply to billing, device provisioning, mail, storage, VPN, DNS, and support.