iequidoo

> Thoughts on 2. How to propagate the shared secret? A third option is to revert the protocol and say that the broadcast QR is already a `vg-request` message. Then:...

> FINGERPRINT is the OpenPGP fingerprint of the channel owner, which will allow the Bob to verify that the messages come from the correct sender, and that there is no...

> 2\. In the encrypted part, this message contains Bob's own fingerprint `Bob_FP` in the header `Secure-Join-Fingerprint`. So, even if we put Subscriber's (Bob's) Autocrypt key into the encrypted part...

> 1\. In a symmetrically encrypted message, it's not visible which secret was used to encrypt without trying out all secrets. If this does turn out to be too slow...

This is a core issue, it's `imex::export_key_to_asc_file()` deleting a file if it already exists. I agree that at least files mustn't be deleted silently. EDIT: not marking as a bug,...

> 1. we can make the filenames more specific by adding the email address to the filename, same as [we did for backups recently](https://github.com/deltachat/deltachat-core-rust/pull/4820) > > 2. we can tweak...

If a message (incl. webxdc apps) was removed locally (for any reason), we keep its tombstone for 48 hours to prevent re-downloading it. After that it should be possible to...

> the bigger question of course is why is this one webxdc getting deleted to begin wtih, especially as it's happened twice now For now i can't answer this. But...

> There's no UI option for the other person in the chat to re-send the app because they aren't the one that sends it. So we have a missing functionality...

> not sure what you mean here, maybe a typo :) however, "Resend" is displayed only for _outgoing_ webxdc. Yes. Actually i wanted to ask how easy it is to...