Top all-time · #3020
Confer Blog
Company blog · confer.to/blogaisecurity
Confer Blog is the company blog at confer.to, writing about ai and security. Since 2025, 26 different Hacker News readers have linked it 32 times, most often “Private Inference”. It is still writing: the last post was on 2026-09-05, and you can follow it by feed.
Too few sampled comments (15) to say how often HN recommends it.?
Why HN links it
HN readers link the Confer blog for technical detail on its private AI service, including confidential-VM inference and passkey-based key storage using the WebAuthn PRF extension. Most links cite its posts as sources.
Summarised by Claude from a sample of 15 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
A complete AI assistant — writing, images, web search, memory. Every conversation is end-to-end encrypted, so no one else can read it.
Most-linked posts?
- Private Inference10 people · 10 mentions · first linked 2026-01-07
- Confer – End to End Encrypted AI Chat5 people · 6 mentions · first linked 2026-01-13
- Making end-to-end encrypted AI chat feel like logging in4 people · 4 mentions · first linked 2025-12-30
- Confessions to a Data Lake3 people · 3 mentions · first linked 2025-12-23
- Confer is bringing foundational AI privacy to Meta2 people · 2 mentions · first linked 2026-03-18
- /2 people · 2 mentions · first linked 2026-01-20
What Hacker News says?
The fondness for TEEs is mostly Moxie's and I think he's not involved with Signal anymore. But he does have an AI chat/inference based on enclaves! https://confer.to/blog/2026/09/confidential-workers-for-priv...
Comment linking /blog/2026/09/confidential-workers-for-private-ai/
on “Registration without a phone number on Signal will use zero-knowledge proofs”Submitted Confessions to a Data Lake as a story · 7 points
HN discussionWell, alternatively there's also AI services with better privacy than the mainstream ones, for example: https://confer.to/
Comment linking /
on “Proton goes all in on using AI”Submitted Making end-to-end encrypted AI chat feel like logging in as a story · 6 points
HN discussionSomewhat related, i recently ran into the issue, after i created an account on Confer.to [1] on my Desktop, i couldn't login on my iPad / iOS with Proton Pass and/or Bitwarden. The error message was: "Error: "Authenticator did not return a PRF result — this passkey probably isn’t PRF-capable." So i now have an account, but can only use it on my Desktop. (can't change to a password login either, it's Passkeys only...…
Comment linking /
on “Don't use passkeys for encrypting user data”Submitted Private Inference as a story · 2 points
HN discussionThey explain it in Private inference [0] if you want to read about it. [0] https://confer.to/blog/2026/01/private-inference/
Comment linking /blog/2026/01/private-inference/
on “Intel Demos Chip to Compute with Encrypted Data”Submitted Private Inference as a story · 2 points
HN discussionIf you're interested in "private AI", see Confer [0] by Moxie Marlinspike, the founder of Signal private messaging app. They go into more detail in their blog. [1] [0] https://confer.to/ [1] https://confer.to/blog/2025/12/confessions-to-a-data-lake/
Comment linking /blog/2025/12/confessions-to-a-data-lake/
on “Intel Demos Chip to Compute with Encrypted Data”Submitted How to search documents we can't read – Confer Blog as a story · 1 points
HN discussionIf we are talking about complete privacy. I am trying out https://confer.to (created by signal team) too and I am unable to run it on my mac (passkey support)(I tried it both in zen & orion) but I tried it on an android chrome (tablet) and I am kinda more optimistic about it too I have heard good things about Kagi in fact, that's the reason why I tried orion and still have it in the first place but I haven't bought…
Comment linking /
on “OpenAI is rolling out age prediction”Submitted Confer is bringing foundational AI privacy to Meta as a story · 1 points
HN discussionThere's a more-recent post on the same blog that gets into the details of how they're using the WebAuthn PRF extension to store key material, but for platforms and browsers that don't yet support the extension, you'll need a password manager that does. There's a table midway down the post with details: https://confer.to/blog/2025/12/passkey-encryption/
Comment linking /blog/2025/12/passkey-encryption/
on “Confessions to a Data Lake”Submitted Confer is bringing foundational AI privacy to Meta as a story · 1 points
HN discussionIn the past, this was necessary to offer end-to-end encryption in web applications. Now, we can use the WebAuthn PRF extension[0] to enable encryption directly from a passkey, without having to deal with awkward key storage[1]. [0]: https://github.com/w3c/webauthn/wiki/Explainer:-PRF-extensio... [1]: https://confer.to/blog/2025/12/passkey-encryption
Comment linking /blog/2025/12/passkey-encryption
on “SubtleCrypto: GenerateKey() Method”Submitted Confer: Making end-to-end encrypted AI chat feel like logging in as a story · 1 points
HN discussionThe website is: https://confer.to/ "Confer - Truly private AI. Your space to think." "Your Data Remains Yours, Never trained on. Never sold. Never shared. Nobody can access it but you." "Continue With Google" Make of that what you will.
Comment linking /
on “Signal creator Moxie Marlinspike wants to do for AI what he did for messaging”Submitted Private Inference – Confer as a story · 1 points
HN discussionhttps://confer.to/
Comment linking /
on “Personal Encyclopedias”Submitted Private Inference as a story · 1 points
HN discussion> you're still exposing your data to Confer They use a https://en.wikipedia.org/wiki/Trusted_execution_environment and iiuc claim that your client can confirm (attest) that the code they run doesn't leak your data, see https://confer.to/blog/2026/01/private-inference/ So you should be able to run https://github.com/conferlabs/confer-image yourself and get a hash of that and then confer.to will send you that same has…
Comment linking /blog/2026/01/private-inference/
on “Signal creator Moxie Marlinspike wants to do for AI what he did for messaging”Submitted Private Inference as a story · 1 points
HN discussionThat is funny it won't even show us the homepage. We are allowed into the blog though! https://confer.to/blog/
Comment linking /blog/
on “Signal creator Moxie Marlinspike wants to do for AI what he did for messaging”Submitted Confer – End to End Encrypted AI Chat as a story · 1 points
HN discussionLooks like Confer is hosting its own inference: https://confer.to/blog/2026/01/private-inference/ > LLMs are fundamentally stateless—input in, output out—which makes them ideal for this environment. For Confer, we run inference inside a confidential VM. Your prompts are encrypted from your device directly into the TEE using Noise Pipes, processed there, and responses are encrypted back. The host never sees plaintext…
Comment linking /blog/2026/01/private-inference/
on “Signal creator Moxie Marlinspike wants to do for AI what he did for messaging”Submitted Private Inference as a story · 1 points
HN discussionThis is very cool because it allows you to use any model. Obviously, it still lets the model and its operator see the entire context of the conversation. I quite like Moxie's Confer[1] approach to just encrypt the whole thing in such a way that no one except the end-user sees the plaintext. [1] https://confer.to/
Comment linking /
on “OpenAI model for masking personally identifiable information (PII) in text”Submitted Private Inference (Confer Blog) as a story · 1 points
HN discussionIf you want privacy the only option that reasonably delivers is Moxie's https://confer.to But tbh I just switched to Anthropic, they need all the support they can get. Claude is great for question/answer.
Comment linking /
on “OpenAI Executes Agreement with Dept of War for Classified Environment Deployment”Submitted Making end-to-end encrypted AI chat feel like logging in as a story · 1 points
HN discussion
