3 ms·
So ChatGPT is end-to-end encrypted?
by paxys 10mo ago
So ChatGPT is end-to-end encrypted?
- hrimfaxi 10mo agoIs your point that TLS is typically decrypted by a web server rather than directly by the app the web server forwards traffic to?
- charcircuit 10mo agoYes. I include Cloudflare as part of the infrastructure of the ChatGPT service.
- lsofzz 10mo agoGo read a book on basic cryptography. Please.
- charcircuit 10mo agoI have read through Handbook of Applied Cryptography.
- Stefan-H 10mo agoSee my other comment, but the answer here is resoundingly "No". For the communication to be end-to-end encrypted the payload needs to be encrypted through all steps of the delivery process until it reached the final entity it is meant for. Infrastructure like cloudflare generally is configured to be able to read the full contents of the web request (TLS interception or Load balancing) and therefore the message lives for a time unencrypted in the memory of a system that is not the intended recipient.
- Stefan-H 10mo agoNo, because there is a web server that exposes an API that accepts a plaintext prompt and returns plaintext responses (even if this API is exposed via TLS). Since this web server is not the same server as the backend systems that are processing the prompt, it is a middle entity, rather than an end in the system. The difference here is that the web server receiving a request for Confer receives an encrypted blob that only gets decrypted when running in memory in the TEE where the data will be used, which IS an end in the system.
- deleted 10mo ago[deleted]