Signal creator Moxie Marlinspike wants to do for AI what he did for messaging

"Data and conversations originating from users and the resulting responses from the LLMs are encrypted in a trusted execution environment (TEE) that prevents even server administrators from peeking at or tampering with them. Conversations are stored by Confer in the same encrypted form, which uses a key that remains securely on users' devices. Like Signal, the under-the-hood workings of Confer are elegant in their design and simplicity."

"Signal was the first end-user privacy tool that made using it a snap. Prior to that, using PGP email or other options to establish encrypted channels between two users was a cumbersome process that was easy to botch. Signal broke that mold. Key management was no longer a task users had to worry about. Signal was designed to prevent even the platform operators from peering into messages or identifying users' real-world identities."

Confer is an open-source AI assistant designed to ensure user data remains unreadable to platform operators, hackers, law enforcement, or any other party except account holders. The service and its large language models run entirely on verifiable open-source software. User conversations and LLM responses are encrypted inside a trusted execution environment (TEE) to prevent server administrators from accessing or tampering with them. Conversations are stored in encrypted form using a key that stays on users' devices. The design emphasizes simplicity and user-friendly key management, following the privacy principles pioneered by Signal. Major platforms can still be compelled to turn over data under subpoena.

Read at Ars Technica