Re: [MLS] Proposal: Proposals (was: Laziness)

[Stephen Farrell <[e-mail]>]

Hiya,

On 23/08/2019 11:24, Raphael Robert wrote:
> Right now, Add and Remove handshake messages have to be signed by an
> existing member of the group. There is no way for the server to make
> any changes to the group membership.

Thanks. As you note in your other mail, that seems a
bit concerning, from a potentially ghostly point of
view. My initial reaction (again with the "benefit"
of not having kept up to date with the drafts:-) is
that a service using MLS could put itself in a position
to do the same thing within the application layer if
necessary, so it'd seem better for it not to be a
feature of the MLS protocol.

I've no opinion on the general idea of proposals, my
concern is only really about a non-member of the group
(the server or anyone else) being able to control
group membership like that, for what I guess would
effectively be all applications using MLS.

Cheers,
S.

> 
>> On 23 Aug 2019, at 11:08, Stephen Farrell
>> <[e-mail]> wrote:
>> 
>> Signed PGP part
>> 
>> Sorry for not following mls in detail but can you explain how:
>> 
>> On 22/08/2019 23:16, Richard Barnes wrote:
>>> 2. Allow some flavor of server-initiated Add and Remove
>> 
>> ...compares to the status quo ante?
>> 
>> Thanks, S. <0x5AB2FAF17B172BEA.asc>
>> 
>> 
> 
>