@Nymnympseudonymm@mstdn.science
2026-02-01 19:33 UTC
@benpate@mastodon.social @fedifox@ohai.social @_elena@mastodon.social @liaizon@social.wake.st @Sascha@bonn.social
Apologies, I did burst in with an opinion and didn't properly read the thread :/
Yes for DMs/PMs and ofc by default for most services.
It's definitely nontrivial with potentially many participants esp people joining a convo. Ring signatures seem like the natural fit.
Replies (1)
-
@benpate@mastodon.social 2026-02-01 23:52
@Nymnympseudonymm@mstdn.science @fedifox@ohai.social @_elena@mastodon.social @liaizon@social.wake.st @Sascha@bonn.social No apologies necessary 😀 On groups and group size, this is the main reason that the MLS protocol was chosen for the spec. It uses a “ratchet tree” structure for generating the keys for each group. It’s a LOT of math, but adding/removing people to a group is just an O(log n) operation - as in it’s VERY fast and efficient. I linked to the MLS spec from my site, if you want to read up: https://emissary.dev/e2ee