the new internet
webË
A new internet, alongside the one you use.
- 5: Mix network hops for every message55
- 2 s: One steady burst, so nobody sees when you’re active22s
- 2: Relays per call, run by different operators22
- 0: Settings to switch stealth off00
Same connection, same apps: post-quantum, hidden inside ordinary HTTPS and run by the people who use it.
- Alongside the internetWorks wherever the web does. Nothing to replace.
- Looks like HTTPSPost-quantum inside: ML-KEM-1024 and ML-DSA-87.
- Always stealthNo setting, no visible mode. Nobody sees who reads what.
- Messages and callsOne to one and in large groups.
- Feeds and contentPosts, forums, videos, photos, reels and music.
- Sites and livePublish at your-name.khensu.nu. Stream to a room or a crowd.
- Global socialFollow anyone in any country, translated on your phone. Posts keep spreading phone to phone when the internet is cut.
- Private AI and feedsSummaries, search and your recommendations run only on your device. What you read and watch never leaves it.
replaces your VPN
better than a VPN. nothing to switch on.
A VPN moves your trust from your internet provider to one VPN company, which then sees your address and everything you open. On webe, nobody holds both.
- No one sees both endsThe first relay knows who you are but not what you open. The last knows what, not who. They’re run by different operators in different countries.
- Looks like a normal websiteVPN protocols are easy to recognise and block. webe traffic is ordinary HTTPS.
- Hides when, not just whereA VPN still shows when and how much you use it. khėnsu.ñü keeps the same rhythm all day.
- Nothing to log“No logs” is a VPN’s promise. Relays never see your content or both ends, so there’s nothing to hand over.
- Post-quantum onlyML-KEM-1024 and ML-DSA-87, so traffic recorded today can’t be decrypted later.
- No off switch, no leaksNo kill switch needed: there is no unprotected mode to fall back to.
This covers everything on webe: messages, calls, payments, feeds, forums, sites and live streams. For the rest of the internet, webe exit is a VPN profile for iPhone, iPad and Mac that sends all your traffic through two relays from different operators, under the same rules.
stealth by default
every phone keeps the same quiet rhythm, all day. typing, idle or asleep, it looks identical from outside. even connecting looks like visiting an ordinary website.
And it’s light on battery. Each beat is one small, fixed-size burst every 2 seconds while the app is open, so the cloak costs little power. It never slows down to save more: not in Low Power Mode, not at 5%. A phone that went quiet when its battery ran low would stand out, so the rhythm stays exactly the same however low it gets.
And the path keeps changing. The relays carrying your messages, calls and streams switch at random while you use them, each on its own clock, so no relay and no one watching a few of them ever sees a whole conversation.
And it keeps working in the background. Calls use Apple’s VoIP capabilities, PushKit and CallKit, so they ring on your lock screen and stay live when you switch apps, like any phone call. The VoIP itself runs on our own network, not a phone carrier’s: encrypted end to end over HTTP/3, the faster successor to secure WebSockets, and the same goes for live streams you’re in. New messages arrive through a wake-up that carries nothing, then one standard-size fetch. With a sunulink.shield on your phone, the rhythm never stops at all: it’s a full node with its own battery.
There is no setting to turn this off. Privacy you can switch off is privacy someone can make you switch off.
10 billion → ∞
ten billion people a day. and beyond.
khėnsu.ñü is built to carry 10 billion people a day on about 6 million small computers, or 2 in every 100 people running a node on ordinary home broadband. There is no central server to outgrow: every node that joins adds capacity, so the network keeps scaling past that without limit.
A single Raspberry Pi 5 does its share. An old or unused phone does it even better, and more profitably: you already own it, so there’s nothing to buy and what it earns is yours from day one. Your laptop or desktop can run one too, in the background while you work, using 50% or less of its idle processing power.
- 10 billion
- people a day, on about 6 million nodes, and it keeps scaling as more join
Old phone
3,400people a dayAn iPhone 11 or later in node mode, plugged in on Wi-Fi. An iPhone 15 Pro sharing half of 2 Gbit fibre over Wi-Fi 6E. Nothing to buy.
- 1,700people a day
Always on, sharing half of a gigabit fibre line, on about 5 kWh of power a month.
Idle computer
1,700+people a dayYour Mac or PC, in the background while you work, using 50% or less of its idle power. More on faster fibre.
suñůlink.shield Best
24/7wherever you goA full node on your phone with its own battery and a guard chip, so the rhythm never stops, even in your pocket. Its mesh radio carries the network where there’s no internet.
Explore suñůlink.shield
Figures from the protocol design: 1 hour of app use per person per day, about 2.5 Mbit/s of node capacity for each open phone at peak, each node sharing half its connection. Real capacity depends on connections and use. iPhone is a trademark of Apple Inc.
runs on any link
works from anywhere. even an ET base.
A boat, a castle, a farm estate, the city or the slums, a private lab, a plane, a spaceship or an ET base. A node needs a connection and a power socket, nothing more. One on satellite internet, such as Starlink, is a full node: it relays, stores and earns like any other. Where there is no internet at all, devices reach each other directly and carry messages hop by hop:
phone to phone about 100 m outdoors; with sunulink.shield about 600 m on open ground, and up to 2 km to a rooftop node.
- Satellite internet
- 5G Ultra Wideband
- Fibre and cable
- Node-to-node mesh, no internet
Mesh ranges are line of sight outdoors, calculated from each radio’s link budget: phones over Bluetooth and Wi-Fi peer-to-peer reach about 30 m indoors; sunulink.shield’s Wi-Fi HaLow reaches about 100 m between shields in a city and 250–500 m to a rooftop node in towns and suburbs. Ranges in Europe are about a third shorter, under its lower power limit. Starlink is a trademark of SpaceX, and 5G Ultra Wideband of Verizon. Named only as examples; no affiliation or endorsement.
names, links, titles, passwords
not only the
English alphabet.
- 13: Full-Unicode characters. 34 times as many names as the P-256 prime1313
- 39: Printable ASCII characters to pass that same prime3939
- 2 bytes: Æ, æ, AE and ae. Four values, the same size22bytes
- 1,112,064: Scalar values. Each added character multiplies the names by this1,112,0641,112,064
A name, a webe address, a title and a password use the whole Unicode repertoire. Æ and æ are different letters, and both are different from AE and ae. ñ is not n. ü is not u.
bits of a file in each byte stored
Higher holds more of a file. Raw bytes win. These letters are not a smaller way to store one.
characters to cover a 256-bit name
Fewer characters, the same space. This is a shorter name, not a smaller file.
- ÆU+00C6, stored as c3 86. One letter, two bytes, its own value.
- æU+00E6, stored as c3 a6. Different from Æ. The case is already in the letter.
- Ñ ñ and Ü üU+00D1, U+00F1, U+00DC, U+00FC. Each is its own letter. n, N, u and U stay different names.
- EmojiAllowed in a name, a link, a title and a password. One emoji is 4 bytes, about 11.9 bits of choice in 32 bits stored. Not a saving.
The ligature is the smaller way to keep the difference. Æ is 16 bits. AE plus a bit that says “this is the ligature” is 17. The same for æ, and for case. Each added character multiplies the number of names by 1,112,064, which is 11,706 times the step of a printable ASCII character. Thirteen of them pass the P-256 prime. Twelve fall short, at 241 bits. A to Z needs 55 characters to pass the same prime.
Sealed messages, pictures and sound stay raw bytes. A byte holds 8 bits. Ninety-five printable characters hold 6.57 bits in that byte, and Æ, ñ and ü cost 16 bits each, so packing a file into those letters takes more room than the bytes. A character is a digit only when the digit is smaller. These stay letters: in usernames, site links, titles and passwords.
The P-256 prime is 2²⁵⁶ − 2²²⁴ + 2¹⁹² + 2⁹⁶ − 1, the field prime of secp256r1 in FIPS 186-4. Thirteen characters over the 1,112,064 Unicode scalar values (17 × 65,536 − 2,048 surrogates) are 261 bits, 34 times that prime, and they also pass the Curve25519 prime 2²⁵⁵ − 19 (RFC 7748). The public DNS host folds the pair: Ægir and ægir both encode as xn--gir-xla. The webe name keeps both. The message key is ML-KEM-1024. The alphabet is the name and the text. Character rules.
run a node. be part of the network.
A Raspberry Pi 5, a Mac, or an old iPhone on Wi-Fi. Tell us you’re in and we’ll get you set up.