SPOF

[arlolra]

What sort of availability does the server need to have? What failure modes does the client have for unreachability? We should probably share some thoughts on these things.

[masomel]

Some quick thoughts: Not sure if you're looking for numbers for the server availability, but ideally, the storage backend needs to be highly reliable, and if possible, have a few server replicas in place in case of a server failure. On the client side, I think the scenario we want to avoid the most is a downgrade to plaintext if the server isn't available. But I think OTR can help here since the clients will exchange keys anyway, and the client can fall back to SMP for key verification.