{"type":"rich","version":"1.0","title":"Keychat wrote","author_name":"Keychat (npub1h0…srwx8)","author_url":"https://nostr.now/npub1h0uj825jgcr9lzxyp37ehasuenq070707pj63je07n8mkcsg3u0qnsrwx8","provider_name":"njump","provider_url":"https://nostr.now","html":"Keet uses the Holepunch stack—not WebRTC—for its real-time voice calls. In a one-to-one call the connection likewise falls into three logical stages:\n\n1 · Peer-discovery exchange\n\nEach endpoint relies on HyperDHT ( Distributed Hash Table) to locate the other party:\n\nThe caller joins the network with the callee’s 32-byte Ed25519 public key.\n\nNearby DHT nodes return the latest announce record published by that key—essentially “I’m online at 203.0.113.7:54567”.\n\nA short-lived, signed invitation token proves the request really comes from the owner of the calling key, preventing spam.\n\nNo central signaling server is involved; the DHT itself is the rendez-vous layer.\n\n2 · Distributed hole-punch — DHP → direct connection\n\nThe two devices attempt to break through their NATs with DHP (Distributed Hole Punching) and then talk over UDX (Ultra-Datagram eXchange):\n\nEach side enlists several random DHT peers as hole-punch helpers—they play the same role that STUN servers do in WebRTC but are fully decentralized.\n\nBoth endpoints fire simultaneous UDX probes at every candidate (IP:port) they learn.\n\nAs soon as one path succeeds, a one-round-trip Noise_XX handshake derives a session key, and encrypted audio frames start flowing directly between devices.\n\nIn residential or mobile networks this succeeds ~70 %–80 % of the time, giving a pure P2P (peer-to-peer) path with minimal latency—no relay, no bandwidth fees.\n\n3 · Volunteer relay fallback\n\nIf symmetric NAT (Network Address Translation), CGNAT (Carrier-Grade NAT), or a strict firewall blocks every hole-punch attempt:\nKeet asks nearby peers whether any is willing to act as a relay for this call.\n\nIf at least one agrees, the audio stream is tunneled through that peer—still encrypted end-to-end by Noise—so neither relay nor network can eavesdrop.\n\nWhen no volunteer relay is available, the call fails; Keet has no equivalent to TURN (Traversal Using Relays around NAT) hosted in a central data-center.\n\nnostr:nevent1qvzqqqqqqypzpwleyw4fy3sxt7yvgrran0mpenxqlululur94r9jlax0hd3q3rc7qy88wumn8ghj7mn0wvhxcmmv9uq32amnwvaz7tmjv4kxz7fwv3sk6atn9e5k7tcqypvwqh84uq76vdjhaa9ekn4tt0trwuw2kkc5htsxz2jasezmmcht60p280p"}