diff options
Diffstat (limited to 'docs/MESHBAY_DESIGN.md')
| -rw-r--r-- | docs/MESHBAY_DESIGN.md | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/docs/MESHBAY_DESIGN.md b/docs/MESHBAY_DESIGN.md index 673ad05..325a3c5 100644 --- a/docs/MESHBAY_DESIGN.md +++ b/docs/MESHBAY_DESIGN.md @@ -1811,7 +1811,12 @@ account, and an unknown, used, expired or cancelled ticket, or a group no longer active, is one uniform refusal. Creating a link says nothing about whether the address has an account (**M1**). At most twenty outstanding per group, as on the node; a lifetime clamped to thirty days; a node token may create one for its own -operator's group (the CLI) and may not ask for mail. What the binding holds +operator's group (the CLI) and may not ask for mail. **The list answered to the +owner holds the links nobody has used yet**, which are the ones there is still +something to do about: a redeemed one has become the member row it produced, and +showing both says the same thing twice. The row itself outlives the list by +thirty days, so the account that used a link is answered on a reload or in a +second tab rather than refused. What the binding holds against, per the convention: **third parties** — a messaging service that previews the link, a forwarded mail — and not this hub, which verifies the addresses it compares and could already be anybody. |