Relay pairs connections by room name and pipes bytes between them, with no password/PAKE handshake at the relay layer — codephrase-based encryption is left to the client side of the transfer.