[Sframe] charter feedback

[Franziskus Kiefer <[e-mail]>]

Hi all,

First, thanks for working on this.
Wire is currently considering sframe for some use cases.

Looking at the charter I noticed two things:

The charter currently doesn't talk about authentication and to which extent
the WG wants to look at it. While authenticity might be implicit through
the used keys the sframe draft currently also uses signatures.

I'm missing a statement about the process followed by the WG. End-to-end
encrypted conferencing is a relatively new topic without much research
around threat models. I therefore think that a process that validates the
threat model and the proposed solution is warranted. This might not have
the same extent as for TLS or MLS, but would still be good to have.

Cheers,
Franziskus