Just because deniability is a non-goal for them doesn't mean we can't add it into a variant of MLS in the future. The Signal Protocol achieved deniability by u

Just because deniability is a non-goal for them doesn't mean we can't add it into a variant of MLS in the future. The Signal Protocol achieved deniability by using a three-way Diffie-Hellman handshake instead of digital signatures: https://signal.org/docs/specifications/x3dh/#deniability https://signal.org/docs/specifications/x3dh/#deniability I think we can do something similar. The Matrix folks are already working on a decentralized MLS, after all.