impromptu client meeting notes
- winston was unclear about "auto launch or boolean if_no_key toggle"
- pozefsky will likely also have issue with this
- winston wanted clarification on multikey support (don’t we have this already)
- winston has reservations about removing insecure/non-popup citing he has ideas on that one... (read as there could be a way to secure the dom element without a popup)
- winston is not totally sold on the duplicity of icons and shortcuts, he also likes the transparancy and lack of ui clutter associated with shortcuts
- winston acknowledges that switching keys is a bit of a pain
- winston does not really the idea of forcing the user to select contacts
- he threw out that if we can get future secrecy to use this, it could be a reason to do that
- colin brings up that this is an issue currently, so no crypto change will help this
- winston really does not like forcing the user to the selecting recipients, suggests we find alternatives
- winston is worried about significant overhead on the user
- winston agrees that inspecting dom for other related grdme elements to help prepopulate user context is theoretically possible but likely hard
- winston notes it will likely be site dependent
- colin suggests having it fail gracefully and support major sites
- winston dislikes the idea of a large ruleset that needs be curated and maintained
- winston suggests that we implement a backchannel messaging protocol to deal with contact resolution issues
- colin worries about the centralized nature
- winston suggests a federated model
- colin really likes not needing to be a cdn/backchannel
- winston agrees there is an issue with dynamic and quick key switching
- winston wants to abstract key management
- winston notes that some of the userbase is only using a single shared secret for group messaging
- colin does not note that this does not seem pfs compliant, but realizes it now
- winston confirms that the use_cases and requirements docutments are otherwise inline with his desires as a client
- winston notes that there is a pick two of three: decentralization, security, and ease of use
- colin indicates the speed dial feature that was discussed monday