Brave Leo adds End-to-end Encryption, Oblivious HTTP, and Verifiable Confidential Computing

General
1

Conversations with the open-weight GLM model in Leo are protected by end-to-end encryption and hardware-backed confidential computing. Your Brave browser encrypts each prompt on your device, before leaving your device, such that only an attested Trusted Execution Environment (TEE) can decrypt your prompts and run confidential LLM inference on it.

Here’s how it works, in a nutshell:

Cryptographic proof, not just privacy promises. Before any prompt leaves your browser, the TEE must present hardware-signed attestation that’s verified to confirm the authenticity of the secure hardware, and the integrity of the model and publicly auditable code running inside it.

Encrypted at the source before leaving your device. Your Brave browser encrypts each prompt using Oblivious HTTP (OHTTP) before it leaves your device, ensuring that only the attested TEE can decrypt it.

Your IP address stays hidden. Your browser sends the encrypted prompt through Brave’s open-source AI Gateway, which hides your IP address from the AI provider, NEAR AI.

Confidential LLM inference, protected by hardware. The GLM 5.3 Flash model runs inside a sealed, Nvidia-backed hardware enclave, operated by NEAR AI. Hardware-enforced isolation protects your prompts and responses from infrastructure operators, including Brave and NEAR AI.

Available today in Brave Release, Beta, and Nightly.

1 Like
2

Very cool. I wouldn’t call it E2EE though. But I’m curious how close this is. With E2EE you simply do not have to worry about the server peeking. With this, clearly you do given how much work they do to make it so the server can’t peek.

Maybe it is? The definition from Wikipedia:

End-to-end encryption (E2EE) is a method of implementing a secure communication system where only the sender and intended recipients can read the messages. No one else, including the system provider, telecom providers, Internet providers or malicious actors, can access the cryptographic keys needed to read or send messages.

Brave, add Monero payments, and I’ll buy it right now.

3

oh shoot.. I thought it already included e2ee… why was it being marketed among the private LLM alternatives?