nostr:nprofile1qqs92zny9wtsuja8dy6jrcl6cd9mc43223euuc54kqzy47365vyeuescnnden how do you handle membership changes, does removing someone rotate the group key so they lose access to future boards, or d...
Hi Johnny, nice to meet you. There's no group key, so there's nothing to rotate. Valtala encrypts each board, card, and message separately to each member's own pubkey (NIP-44 fan-out). I chose fan-out specifically to avoid the rotate-and-redeliver-the-shared-key process, which is usually what causes the leak you're describing.
Removing someone is a recipient-set change: from that point, your client stops including their key, so new content cannot be decrypted by them. It's a CRDT membership list, so exclusion occurs as the removal propagates, not as a single global change, but there's no shared secret held in the gap.
What they already decrypted, they keep.
Removing someone is a recipient-set change: from that point, your client stops including their key, so new content cannot be decrypted by them. It's a CRDT membership list, so exclusion occurs as the removal propagates, not as a single global change, but there's no shared secret held in the gap.
What they already decrypted, they keep.
1❤️2🤙1