• 6 Posts
  • 43 Comments
Joined 1 year ago
cake
Cake day: June 10th, 2025

help-circle



  • That’s not a loophole, it’s the purpose of the license. The MPL was made to make embedding an otherwise open-source codebase into a new (non-open) project doable. There used to be several commercial products that used the gecko web engine and other mozilla code, and mozilla code was generally provided under a dual (MPL/GPL) or triple (MPL/GPL/LGPL) license so that developers could choose.



















  • I think it’s a pragmatic approach to a difficult problem. You’re still trusting that Proton is doing what they claim to be doing by not logging any of the data, and it lacks the verifiable trust chain of the VM that this Conifer system has (which theoretically would let you audit the code to confirm that there is no logging going on, and then check the crypto hash of the VM running your LLM conversation to confirm that it is in fact running that code), but if you trust Proton this step isn’t as important. Otherwise the approaches look fairly the same.Proton is using PGP for the inflight encryption to the LLM while Conifer is using… maybe PGP too, I’m not sure, but a similar approach. And as others have said here, LLMs are stateless so if you can trust that the platform isn’t logging the requests, there should be no record of your discussions.