Unverified50% confidenceFactExact time
RedPen enforces network isolation at the code level: the HTTP client throws an exception when the base URL is not loopback, with test coverage; uploaded files are parsed from bytes and never written to disk; scripts/offline_proof.sh samples process sockets and verifies they are all loopback.
1
Sources
50%
Confidence
Long-term
Relevance
10/14/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe otpauth:// link itself contains no encryption; anyone who can read that string can reconstruct the authenticator from it, and exposing that URI has exactly the same consequences as directly leaking the setup key.61% similarUnverifiedIn the OHTTP architecture, the relay can see the client's IP but cannot see the encrypted request content, while the gateway can decrypt and process the request content but can only see the relay's IP.60% similarVerifiedWhen UDP is completely blocked by a firewall, Tailscale ensures connectivity through DERP (Designated Encrypted Relay for Packets) relay servers, and end-to-end encryption prevents the relay servers from decrypting data content.60% similarUnverifiedUnsloth emphasizes that the web environment is isolated from accounts, chat history, and APIs, and that web pages cannot access this sensitive data.59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1026527API
curl https://kongchang.com/api/v1/knowledge/claims/1026527MCP
get_claim(id=1026527)