The client checks every hash and signature, so servers can only store, serve or refuse; what remains is availability and getting an authentic client, at three levels of care.

It states the security claim precisely, including its edge.

A Peergos client checks the seal on everything that arrives. The hash of every block. The signature of every signed thing it receives.

So a server cannot alter your data, and cannot forge a pointer. It can only store and serve.

What a server can still do is refuse. Availability is the trust that remains.

The client you run is the last piece. You have to get a real copy of Peergos from somewhere.

Three ways to get one. Trust the web and its certificates. Download the app. Or build it yourself.

Check yourself. What is the one thing a malicious server can still do to you?