Winston currently uses AES-128 encryption to secure the network. This is the strongest level of cryptography we are legally allowed to export outside of the US.


For the encrypted DNS, it is decrypted at the end server (ie: Cloudflare).