Sealed on your side, and a computer that has to be let in
- Messages, call audio and video, and the key to every room are sealed on your computer with keys the service never receives. What it stores is ciphertext it cannot open.
- An account needs a confirmed address. You sign up with an email and a password, a code confirms the address, and your username comes from that address.
- A computer this account has not used before signs in but opens nothing until a computer you already use reads an eight character code off it. With no other computer left, a code goes to your email instead.
- Safety numbers, so you can be sure it is really them, and a notice on somebody's row the moment their key changes
- A call history that belongs to the account rather than to one machine, sealed before it leaves, so all of your computers show the same list. It can be switched off or cleared, and calls older than thirty days go on their own.
- Spaces and groups are gone. A call is a link, and the people you talk to live in one list.
Older installs update themselves, and conversations from before this release do not come across, because nothing that could carry them survived the move to keys the service does not hold.