Bitcoin OG Martti Malmi Launches Nostr VPN to Kill Centralized Privacy Chokepoints

Martti Malmi, one of Bitcoin’s earliest developers and a man who worked directly with Satoshi Nakamoto, has released Nostr VPN — an open-source mesh VPN that aims to kill off the central trust model behind today’s commercial privacy tools.

• Martti Malmi launches Nostr VPN
• Peer-to-peer mesh replaces central VPN servers
• User-controlled exit nodes shift the trust burden back to the user
• No-log VPN claims remain shaky under legal pressure
• Privacy and censorship resistance get more urgent as surveillance tightens

Malmi is no crypto tourist riding the latest privacy trend. In Bitcoin’s early days, he was known as Sirius, received the first-ever Bitcoin transaction from Satoshi, and later maintained bitcoin.org. That history matters because Nostr VPN sits squarely in the same design philosophy that made Bitcoin infamous to the old guard and beloved by everyone who likes sovereignty over hand-holding: remove trusted intermediaries, reduce single points of failure, and let users control the keys, the money, and now potentially the network path too.

Nostr VPN uses the Nostr protocol as a signaling and coordination layer, while the actual traffic moves through a peer-to-peer mesh network. Put simply, a mesh VPN is a network where devices connect through each other instead of relying on one company-owned server farm sitting in the middle like a privacy toll booth. Nostr helps the devices find and coordinate with each other; it is not the pipe carrying your VPN traffic.

That is a very different beast from the usual commercial VPN setup. Traditional providers like NordVPN, ExpressVPN, and ProtonVPN are marketed as privacy shields, but the basic deal is still the same: you hand your traffic to a company and trust it not to log, inspect, sell, or cough it up when a government starts tapping the glass. And yes, that trust has been burned before. “No-log” is a lovely marketing phrase until lawyers, subpoenas, and seizure orders show up with very different opinions.

The pitch behind Nostr VPN is brutally simple: remove the middleman entirely. The network uses public-key cryptography, so each user’s identity is a cryptographic key pair rather than an email address, account login, or some other handy breadcrumb tied to a real-world identity. Instead of depending on a provider’s promise, users can operate their own exit node — the last stop before traffic reaches the public internet.

That exit node can be a home server, a rented VPS such as one from Hetzner, or any machine the user controls. When traffic leaves the network, websites see the IP address of the exit node, not the user’s actual device. In other words, the privacy burden gets pushed out to infrastructure you own or choose, rather than a faceless company whose business model still depends on your faith.

That distinction is the whole game. A commercial VPN asks users to believe the provider is clean, uncompromised, and too principled to bend when the heat comes on. A decentralized VPN like Nostr VPN tries to make that promise irrelevant by removing the company from the equation. As the framing around the release puts it:

“Martti Malmi… has released a new version of Nostr VPN — an open-source mesh VPN that discards the entire trust model underlying conventional virtual private network services.”

“The structural flaw at the center of commercial VPN services is straightforward.”

“That trust has been violated repeatedly across the industry.”

“Nostr VPN eliminates the central server entirely.”

“Each user’s identity on the network is a cryptographic key pair, not an account or email address tied to a real-world identity.”

“The critical distinction from a commercial VPN is that the user is the operator.”

“Bitcoin removed trusted third parties from money. Nostr VPN applies the same logic to internet privacy.”

“Nostr VPN represents a meaningful step toward infrastructure that cannot be compelled to betray its users — because there is no operator left to compel.”

That last line is the meat on the bone. This is not just about “better privacy” in the abstract. It is about censorship resistance, self-custody, and building internet infrastructure that doesn’t hinge on a single point of failure. Bitcoin removed the need to trust a bank to hold and move value. Nostr VPN is trying to apply the same logic to internet access and routing. That’s very on-brand for the cypherpunk playbook: trust less, verify more, and stop pretending centralization is some harmless convenience.

Still, let’s not get drunk on the decentralization Kool-Aid. A decentralized VPN solves one big problem — the need to trust a central provider — but it does not magically erase every privacy risk on earth. Metadata can still leak. Users can still misconfigure things. A bad exit node can still create headaches. And decentralized systems can be harder to use than slick commercial products that throw pretty dashboards at people and call it security. Privacy tooling often has a nasty habit of being brilliant, necessary, and mildly annoying all at once.

That tradeoff matters. A home-run privacy design that only hardcore users can operate easily is still a win for the ecosystem, but it may not replace mass-market VPN apps any time soon. Mainstream adoption usually lives or dies on setup friction, speed, and whether people can use the thing without reading a 14-page manifesto and sacrificing a goat to the command line. If Nostr VPN wants to move beyond the privacy-maxi crowd, usability will have to improve without watering down the core idea.

The timing, though, is hard to ignore. Governments are tightening the screws on VPN usage and expanding surveillance powers, including in the UK. That puts decentralized privacy infrastructure in a much more interesting position. When states push harder on centralized chokepoints, networks that are harder to seize, pressure, or quietly compel start looking less like ideological toys and more like practical defenses.

There is also a broader Bitcoin lesson here that should not be lost in the technical weeds. The most important innovation Bitcoin introduced was not just digital money; it was the rejection of blind trust in middlemen. Banks, payment processors, and custodians are convenient until they become control points. VPN companies are no different. If one entity can see everything, keep records, and be forced to hand them over, the “privacy” label starts to look like a coat of paint on a very old jail cell.

Key questions and takeaways:

• What is Nostr VPN?
  It is an open-source mesh VPN that uses Nostr for signaling and coordination, while users route traffic through a peer-to-peer network instead of a central company.

• How is it different from a normal VPN?
  Traditional VPNs depend on a provider to route traffic and manage logs. Nostr VPN removes the central operator, which reduces the need to trust a company with your privacy.

• Who is Martti Malmi?
  He is an early Bitcoin developer who worked with Satoshi Nakamoto, received the first Bitcoin transaction, and later maintained bitcoin.org.

• Why does the exit node matter?
  The exit node is the last hop before traffic reaches the public internet. Websites see that node’s IP address instead of the user’s device, which helps conceal the user’s location.

• Does this solve online privacy completely?
  No. It improves the trust model, but privacy still depends on good setup, careful use, and the limits of the network design itself.

• Why is this relevant right now?
  Because governments are increasing pressure on VPN usage and surveillance, making decentralized privacy tools more attractive to users who do not want a central gatekeeper.

• Can decentralized VPNs replace commercial VPNs?
  They may be a better fit for advanced users, privacy advocates, and anyone who wants more control, but mainstream adoption will depend on usability and performance.

• Are “no-log” VPN claims trustworthy?
  They should be treated with skepticism. A company’s promise means little when the company itself can be compelled to cooperate or when reality does not match the marketing.

The bigger picture is straightforward: Bitcoin’s logic is leaking into other layers of the internet, and that is a good thing. If money can be made more sovereign by cutting out trusted third parties, then internet privacy can be improved the same way. Nostr VPN is not magic, and it is not a silver bullet, but it is a serious attempt to build privacy infrastructure that does not depend on a company’s goodwill, a regulator’s patience, or a compliance team’s bedtime story.

For a Bitcoin OG like Martti Malmi, that feels less like a detour and more like a continuation of the original mission. Build systems people can actually own. Remove the choke points. Make surveillance harder. And if the old model needs a central operator to function, maybe the old model is the one that deserves to die.