End to end encrypted means this here: [Client] ---> [Private.sh] ---> [Gigablast] In the above diagram, [Private.sh] cannot see the search query. Thus, it's

End to end encrypted means this here: [Client] ---> [Private.sh] ---> [Gigablast] In the above diagram, [Private.sh] cannot see the search query. Thus, it's end to end encrypted. Private.sh is the "signal server" in this case. It works because the actual client, in this case, is the javascript running client-side on the web browser. Your browser encrypts the query, clientside, before sending it to private.sh. All private.sh does is strips the IP away before sending it to gigablast. Hope this is more clear!