After Brave verifies the enclave's attestation, the browser encrypts the query using a key bound to the TEE. The TEE decrypts ...