It could also be used in a 1-on-1 chat. Does it essentially become a "normal" double ratchet in that degenerate case? nostr:nprofile1qqspwwwexlwgcrrnwz4zwkze8rq3ncjug8mvgsd96dxx6wzs8ccndmcpzamhxue69uhkv6tvw3jhytnwdaehgu3wwa5kuegpp4mhxue69uhkummn9ekx7mqpzpmhxue69uhkummnw3ezuamfdejsul2dhz

Reply to this note

Please Login to reply.

Discussion

MLS works great for 1-1 chat. There’s slightly more cryptographic overhead than a signal double ratchet but really it’s almost negligible. And MLS makes turning a 1-1 chat into a group trivial, which is something signal protocol can’t do efficiently without Signals servers in the middle.

Double ratchet rotates message keys after each message, so previous consecutive messages from the same author become undecryptable, when the previous message key is discarded after decryption. It's a small difference, but it's good for disappearing messages.

This is the same for MLS.