Why “No Dealing Server” Is the Watershed of Online Poker Security
An online poker platform’s security list can run long: firewalls, privilege separation, audit logs, intrusion detection… but all of it does one thing — guard the server that knows every hole card. The other approach: make that server not exist at all. That is not an incremental improvement. It is a watershed.
Three angles on the difference
Angle one: attack surface
With a dealing server, deck order and hole cards concentrate in one place — the most tempting target on the platform. A hacker who gets in gains a god view over every table. In a no-dealing-server architecture, the deck exists only in multiparty-encrypted form, distributed across the players’ browsers. There is no single citadel whose capture wins the war — breaching the relay yields only ciphertext and signed messages.
Angle two: insider threat
External hackers must climb the wall; insiders are already inside it. The superuser scandals proved that as long as a “see all hole cards” privilege exists, someone will eventually abuse it. Without a dealing server, the operator itself lacks that privilege — not “promises not to use it,” but does not have it. The decryption keys are scattered across each player’s own device; the operator holds none of them.
Angle three: the worst case after a breach
Security engineering asks a pragmatic question: “Assume we are fully compromised — what is the loss?” The traditional architecture’s answer is terrifying: the attacker can silently read cards and steer outcomes until noticed. The no-dealing-server answer is far milder: an attacker can disrupt service (drops, delays), but cannot conjure hole cards or alter the deck order — those capabilities simply don’t exist in the architecture. The worst case is “the game can’t continue,” not “the game was silently harvested.”
One analogy to tie it together: the traditional platform puts the whole city’s money into one vault and hires the best guards. The no-dealing-server architecture keeps each family’s money in its own safe — there is no city vault. The best guards in the world are still worse than the vault not existing.
So what does the server still do?
Fair Poker’s server does exactly one job: forwarding messages (a global edge relay). It sees only ciphertext and signed events — it does not generate deck order, store a plaintext deck, or hold any player’s decryption keys. It is a post office, not a dealer: a post office losing mail causes trouble, but a post office cannot read the cards inside your envelope. How that works technically: the cryptography of mental poker. Whether the claim is true: all verification materials are public.
Costs, and the honest boundary
Removing the dealing server is no free lunch: multiparty protocols are more sensitive to disconnections and heavier to engineer — problems we invest in continuously. And it does not cure player-side cheating (collusion and bots still need governance; see the full cheating guide). But on the most fundamental question — *can the platform cheat you?* — the no-dealing-server architecture answers with an architectural no. That is exactly where the watershed lies.