Thank you, this is constructive. Let me complement with some more details: Privacy. Messages in a private chat or group should not be visible to the operator o

Thank you, this is constructive. Let me complement with some more details: Privacy. Messages in a private chat or group should not be visible to the operator or others. This likely necessitates e2ee, but it's possible that some multi-party protocol could protect from malicious operators without going full on e2ee (difficult on web). Integrity: you don't want rogue operators to be able to falsify content. While you can't stop any website from faking content, you can stop it from propagating by having signatures and verifying them. Availability: you should be able to post and fetch at all times, which necessitates aggressive caching. Signatures (from above) are useful here, because you can use untrusted storage layers. Security: how do you prevent an instance operator from stealing your account or posting on your behalf. Abuse: no system is anywhere near perfect, but the ones that come close are extremely centralized and use fingerprinting and behavior analysis. We probably don't want that, so what else? Note that all of these are deeply tied into the identity problem. We would really need a form of PKI for real people (but without exposing real world identity). If people actually control their private keys, all of the above is greatly simplified. But even in defi, where custody of your private keys have a HUGE direct monetary value, most people don't want/know/care to set it up. So we have huge challenges.