Anonymous sending that survives a week away
Verus sends messages without the server knowing who sent them. Why the apps now look after their own anonymous credentials before they lapse.
What I tried
Verus lets the server turn away abuse without knowing who is sending, using anonymous credentials that expire. The first version renewed them only when they ran out.
Why I chose differently
Someone who puts the app down for a while comes back to credentials that have expired rather than run out. Sending should just work however long they were away.
What I chose
The apps now look after the lifetime of their credentials and renew them in good time. Existing installs picked this up on their next send. I confirmed it end to end with a call that rang a locked iPhone.
The principle
Any credential with a lifetime needs the client to know that lifetime.
- Anonymous credentials
- Token expiry
- iOS
- Reliability