Skip to content

Protocol Status

  • Version: 0.11
  • Status: Reference spec more or less settled. API rewrite in progress.
  • Last Updated: September 10th, 2026

The following areas are being rewritten (not backwards compatible):

  • Authentication: JWT -> PrivacyPass (unlinkable authentication) Specified
  • Wire Format: Single envelope -> Double-encrypted envelopes Specified
  • Delivery Addresses: Server-assigned -> Per-group mailbox keypairs Specified
  • KeyPackage Distribution: device_id indexed -> Blind derived handles Specified
  • Federation: Relayed MLS ciphertext -> Opaque envelope relay Specified
  • ContactRequest: Unauthenticated -> Signed with replay rejection Specified
  • MLS as E2EE foundation
  • Two-layer identity architecture
  • InfoPackages and contact exchange model
  • Moderation architecture

Hard freeze after authentication and envelope changes are fully specified and implemented.