@holtwick I agree! Would love to read your thoughts if you write them up. We’re just about to spin up a project to develop a generic e2ee layer for Automerge that will work both with untrusted sync servers and p2p.
@swick @holtwick A partial answer is in this paper: https://eprint.iacr.org/2020/1281 — the algorithm offers similar security to MLS, but decentralised. We’re currently working on filling in the bits that are missing in that paper, especially the group membership algorithm