> Of course, nothing prevents a chat application from going out of its way to maintain a separate copy of the contact book, thus allowing it to leak the existen

> Of course, nothing prevents a chat application from going out of its way to maintain a separate copy of the contact book, thus allowing it to leak the existence of Trent’s key/value pair after the secret Basis is closed. However, that is extra work on behalf of the application developer. Um, no? Don't app devs do stuff like this all the time? E.g., hm I'm in a hurry so why don't I just plunk down some JSON from the last known state of this super handy feature to disk so its ready at startup? Also, I wrote this a gazillion years before anyone even suggested the existence of plausibly-deniable anything. Also, I farted this pattern all over the whole app that is now somehow critical U.S. digital infrastructure, and I don't answer emails anymore after moving to Tahiti to build experimental percussion instruments out of driftwood...