Reading as device:?
Reading as deviceEach message is sealed separately for every recipient device. Pick a device here to decrypt the transcript with that device's key — exactly what that person would see. In a real deployment only the device's owner holds its private key.
safety #: 14612 75108 20959 01899 84127 02003 03434 63184 15827 42495 28480 39369
- the Board Chair · 8/6/2026, 6:07:28 AMCall me before the 4pm. One item, not for the group.
- Chief of Staff · 8/6/2026, 6:07:28 AMUnderstood. Standing by.
What the server actually stores?
On-the-wire envelopeThis is the raw record the server keeps for the latest message: iv (a one-time nonce), eph_pub (the sender's per-message public key), and ciphertext (the sealed bytes). There is no plaintext column anywhere — only a holder of the recipient device's private key can read the message.
?
On-the-wire envelopeThis is the raw record the server keeps for the latest message: iv (a one-time nonce), eph_pub (the sender's per-message public key), and ciphertext (the sealed bytes). There is no plaintext column anywhere — only a holder of the recipient device's private key can read the message.
wire.envelope
$ halo show --raw --lastiv: 35byXp/hlf6DEUEveph_pub: MCowBQYDK2VuAyEAkCu6gNTusBkg2uiXUwvhSu7V3pF/…ciphertext:Dn31coagXELC3xJvxhm+N4xHLer+8iR8oy1Zi0+PJ4lX…plaintext: <never stored on server>