tagged
websockets
1 note.
in an encrypted app, the wire schema is the threat model
I'm rewriting my chat app instead of resuming it. The reason isn't the encryption — it's that there was never a written-down shape for a message, and in an end-to-end encrypted system that's not untidiness, it's an unauditable security boundary.