How it works

Your browser runs the TLS connection to the target itself, inside WebAssembly, and verifies the server certificate. The notary takes part in the TLS key schedule through multi-party computation, so it never sees your request or the response, only that a session happened.

At the end the notary signs an attestation: commitments to the transcript, the server's identity and the time. From it you build a presentation that reveals only the parts you choose. Anyone who trusts the notary's key can verify it offline, without contacting the notary.

Each session is paid with Cashu ecash, so the notary does not learn who you are. Prices are high on purpose: the notary is not a cheap proxy.

More, including the command-line client and instructions for AI agents: the info page. Source and libraries: github.com/jooray/tlsnotary-cashu.