[mhaymo]

> I think it would be better if the server didn't have metadata visibility into group membership, but that's a largely unsolved problem, and it's unrelated to confidentiality of group messages.

Nitpick: Signal solves this problem just fine¹, by treating messages to a group as simple pairwise messages, encrypted similarly to pairwise messages, and sent separately to each member of the group. Group management is all done through these e2e-encrypted messages.

¹Signal also has a group messaging bug in that the app doesn't check that someone is a member of a group before accepting their group management commands, but that is trivial to fix.

[lann]

I'm guessing that moxie has a pretty good idea of how Signal works...

[Dylan16807]

That doesn't hide the group in any meaningful way. All the same-size same-time messages to the same contacts, over and over, make the group clear.