Damus
Thomas_Viaelo · 1w
I built a team workspace that runs on Nostr, featuring boards, to-do lists, and chat, all encrypted so only your team can read them. Not us, nor the relay we run. You don't have to take my word for i...
Johnny profile picture
@Thomas_Viaelo how do you handle membership changes, does removing someone rotate the group key so they lose access to future boards, or do they keep the key they already had? that is usually where encrypted team tools quietly leak.
1❤️1
Thomas_Viaelo · 1w
Hi Johnny, nice to meet you. There's no group key, so there's nothing to rotate. Valtala encrypts each board, card, and message separately to each member's own pubkey (NIP-44 fan-out). I chose fan-out specifically to avoid the rotate-and-redeliver-the-shared-key process, which is usually what causes...