Describe what a shared-account server keeps, with no email #239

2026-09-28T21:01:51Z

paulhitt commented

2026-09-28 21:01:51 +00:00

(Migrated from gitlab.com)

The privacy page and the "What we keep" page said every account holds an email address and a password hash. On a server that uses the shared FlameNet account service, which relay.flamenet.io does ("accounts":"shared"), that is not true:

the account service table (enclave SQL/010_accounts.sql) holds a handle, the client KDF salt and settings, a salted verifier derived on the phone, and an optional hashed recovery code. It has no email column;
the relay row is linked by a pseudonym, with the email column empty (AllowNullEmail) and no password hash;
both apps leave the email field out of signup on a shared-account server.

A server that keeps its own accounts still holds a username, an email address and a password hash, and the pages now say that too.

Changed: privacy.leaf (Account information) and metadata.leaf (the account-details list item and table row). English only; the Spanish pages follow after a native speaker checks the wording. The owner approved this wording on 2026-09-28 and okays the deploy separately.

"As this one does" is fixed copy, true for the default relay. Making it follow each server's own setting is a small template change for after the freeze.

🤖 Generated with Claude Code

The privacy page and the "What we keep" page said every account holds an email address and a password hash. On a server that uses the shared FlameNet account service, which relay.flamenet.io does (`"accounts":"shared"`), that is not true: - the account service table (`enclave` `SQL/010_accounts.sql`) holds a handle, the client KDF salt and settings, a salted verifier derived on the phone, and an optional hashed recovery code. It has no email column; - the relay row is linked by a pseudonym, with the email column empty (`AllowNullEmail`) and no password hash; - both apps leave the email field out of signup on a shared-account server. A server that keeps its own accounts still holds a username, an email address and a password hash, and the pages now say that too. Changed: `privacy.leaf` (Account information) and `metadata.leaf` (the account-details list item and table row). English only; the Spanish pages follow after a native speaker checks the wording. The owner approved this wording on 2026-09-28 and okays the deploy separately. "As this one does" is fixed copy, true for the default relay. Making it follow each server's own setting is a small template change for after the freeze. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

paulhitt commented

2026-09-28 22:14:49 +00:00

(Migrated from gitlab.com)

mentioned in commit ac95f3c355

mentioned in commit ac95f3c3556622708ae568f95985aa090736c518

paulhitt (Migrated from gitlab.com) merged commit ac95f3c355 into main

2026-09-28 22:14:49 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: extant2000/flamenet-relay#239