How DenaliDrop protects sources

This is the public site. Submissions are never accepted here — only over Tor, at the address shown above. Here is how the drop box protects the people who use it.

• No accounts, no IP logs. Sources submit anonymously; we record no visitor IP addresses.
• Encrypted on arrival to an offline key. Submissions are sealed with public-key cryptography to a key kept off the server, so a server seizure yields only unreadable ciphertext.
• No JavaScript. The drop box runs no scripts and works in Tor Browser at its safest setting.
• Self-authenticating address. A Tor onion address is a cryptographic key — connecting to it proves you reached the genuine site. This clearnet page, on a domain with a real HTTPS certificate, is where the correct address is published, so you can trust which onion is real.

We’re honest about limits: scrub documents for hidden metadata, use a device and network you control, and prefer Tor Browser. The one risk encryption-at-rest can’t cover is a live compromise during the brief moment a submission is being sealed — Tor, isolation, and offline keys bound it.