Allow unconfirmed members. Fixes #205 #208
Conversation
Change the definition of member to include only having been added to the group and not contributed to the group and explains what that might mean.
| secret in a manner verifiable by other members of the group, other members | ||
| cannot assume that the client is a member of the group. | ||
| cannot assume that the client is a member of the group; for instance, the |
There was a problem hiding this comment.
While you're here, we might want to add that while other clients in the group shouldn't assume the new client is a Member as per the definition above, they should assume that that client can indeed decrypt all messages that they send after it was added to the group.
There was a problem hiding this comment.
Thanks for the suggestion. I actually think there are two different things one might assume:
(1) that the client might have access to the messages, so you have no secrets from them
(2) that the client will have access to the messages, so they will (for instance) act on them.
I think you should assume (1) but not (2).
There was a problem hiding this comment.
Yes, I think that's the distinction we want here.
Change the definition of member to include only having been added to the group and not contributed to the group and explains what that might mean.
Note. this will need WG consensus to change.