diff options
Diffstat (limited to 'docs/MESHBAY_DESIGN.md')
| -rw-r--r-- | docs/MESHBAY_DESIGN.md | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/docs/MESHBAY_DESIGN.md b/docs/MESHBAY_DESIGN.md index 799b162..561ac82 100644 --- a/docs/MESHBAY_DESIGN.md +++ b/docs/MESHBAY_DESIGN.md @@ -3056,9 +3056,13 @@ epoch key from `chat_keys_req`, a message sealed under the current epoch through the sending device's derived subkey and signed with its key on the node, which must be the device `device_hello` named. A stored message is read signature first, then key, then content, and one that fails any of them is shown as -unreadable, never left out. The name shown is the one sealed by the sender; the -roster check that the signing device belongs to the account the node names -(Tier 2, §3.3) is the application's and not done here. +unreadable, never left out. The name shown is the one sealed by the sender, and +the signing device is checked against the group's roster as the application +checks it (Tier 2, §3.3): chains of countersignatures walked from each account's +roots, the keys accepted per account and node kept in the store, the roster read +again once before a key is called changed — and only "changed" is said, under +the message. `chat` alone opens the interactive chat: the groups, one group's +conversation IRC-style with what the node pushes arriving live, and back. **Deleting** (`rm`) is `file_delete` signed with the machine's key on the node (§5.4): the node accepts the uploading account's devices and the operator's. |