Radicle’s peer-to-peer protocol ships private repos in cleartext and lets nodes impersonate each other
On 23 September 2026, Radicle disclosed that its peer-to-peer protocol — present in every version ever released — transports data in cleartext and accepts node impersonation during the connection handshake. Anyone using private repositories should stop seeding them and treat everything already synced over the network as disclosed.