> Trust not only they are not malicious, but also they won't have some kind of v...

throwawayffffas · 2025-07-23T08:02:24 1753257744

There is more attack surface with a server.

The vulnerability doesn't even have to be in their software, but in any piece of software they use, ssh, nginx, etc.

Dylan16807 · 2025-07-23T09:50:10 1753264210

A compromised relay server can't access the data because it's encrypted.

A meaningful vulnerability would have to be in either the software itself or in the coordination server. That attack surface is the same whether or not you have relays.

You can reduce the attack surface to just the software if there's a way for users to verify keys manually. But again, same attack surface whether or not you have relays.