Blog
Notes from building Miuchio.
The problems that took the longest, what I tried, what broke, and why things ended up the way they are. The exact rules are in the protocol pages; these posts are the story behind them.
- Removing someone without leaking the next photoMaking a new key is the easy part of removing someone from an album. The hard part is the time before that key exists, and remembering it is owed after the evidence has been deleted.
- Deleting an account when the response never arrivesThe server accepted the deletion. The phone never heard back. Should it wipe itself? Answering that safely took a receipt, a status check that works without a session, and one database row that settles a race.