Blackhorse Publishing — Essays

Palomino

Nobody Ships Encryption. They Ship a Toggle.

2026-07-01 · encryption, VPN receipt, usable encryption, signed session, network security, Palomino

The math has been free for a decade. Palomino ships the missing half: a signed receipt you actually hold.

For thirty years, encryption was a thing experts argued about.

It was a library. A primitive. A word in a whitepaper. Something you imported, configured, and prayed over. The people who understood it were a priesthood, and the rest of us got a green light near the clock and were told it meant we were safe.

Here is the thing nobody says out loud: the math has been solved for a long time. The math is not the hard part. Strong encryption has been effectively free for over a decade.

What was never solved was turning it into something a person could actually hold.

That is what Palomino stands for.

The gap that everyone stepped over

Every serious tool in your life hands you evidence. The garage stamps your ticket. The coffee shop prints a receipt. The airline scans your pass and the record is yours to keep.

Then you open a VPN — the one tool whose entire job is to protect you — and it gives you a mood. A light. Probably fine.

The industry decided that encryption was the finish line. Ship the tunnel, light the lamp, collect the subscription. Nobody asked the obvious next question: if a connection actually happened, where is the proof, and who holds it?

For most of this category, the answer is nobody, and nowhere.

Encryption stopped being the hard part years ago. Usable encryption that hands you the receipt still barely exists.

Why now

Because everyone works from everywhere now, and the perimeter moved into a coffee shop and a phone.

Because the institutions I came up around run on evidence — every decision leaves a trail somebody can pull. And the same institutions turned around and accepted a toggle as proof of network security, because the honest alternative was a procurement cycle nobody had the budget for.

Because the primitives finally got cheap enough and fast enough that the interesting work is no longer can we encrypt this — it's can we make encryption behave like a product a normal person uses without a manual.

The math got commoditized. The usability never did. That is the opening.

The flip

Palomino takes the thing that used to be a library and makes it a product you can read.

It is an encrypted VPN for your phones and laptops. That part is table stakes; everyone claims it. The part that matters is what it leaves behind. Every session produces a signed receipt — recorded when the connection happened, not reconstructed later from a vendor's logs. The evidence is a byproduct of using it, not a report you file afterward.

That is the whole inversion. Encryption used to be the engine — a mechanism buried in the product that you had to trust on faith. Palomino turns it into a receipt — something the person who made the connection actually holds.

Same math the priesthood argued about for thirty years. Pointed, finally, at the one thing they never bothered to ship: proof you can keep.

Where it is

Palomino is live and encrypting real connections today. A publicly available app — the thing that collapses "enterprise-grade access" down to an install — is close. The clients are built. What's left is distribution, not capability.

I'm writing this while the build is still running, which is the only way I know how to do it. The green light was never the product. The receipt is the product.

Blackhorse is a compression and protocol architecture company. Palomino is its encrypted network layer. The stack lives here; Palomino lives at blackhorsepalomino.com.

All essays