diff --git a/draft-ietf-mls-architecture.html b/draft-ietf-mls-architecture.html index 3d7e989..8dacb6d 100644 --- a/draft-ietf-mls-architecture.html +++ b/draft-ietf-mls-architecture.html @@ -2100,8 +2100,8 @@

Strategies for sequencing messages in strongly and eventually consistent systems -are described in the next two subsections.

+are described in the next two subsections. Most Delivery Service will use the +Strongly Consistent paradigm but this remains a choice that can be handled in +coordination with the client and advertized in the KeyPackages.

However, note that a malicious Delivery Service could also reorder messages or provide an inconsistent view to different users. The "generation" counter in MLS messages provides per-sender loss detection and ordering that cannot be diff --git a/draft-ietf-mls-architecture.txt b/draft-ietf-mls-architecture.txt index 96d87b2..80abfa0 100644 --- a/draft-ietf-mls-architecture.txt +++ b/draft-ietf-mls-architecture.txt @@ -648,15 +648,18 @@ Welcome (Charlie) -----------------------------------------> | Step 4 Service might fall into: * Consistent and Partition-tolerant, or Strongly Consistent, systems - can provide a globally consistent view of data but may stop - working if there are network issues; + can provide a globally consistent view of data but has the + inconvenient of clients needing to handle rejected messages; * Available and Partition-tolerant, or Eventually Consistent, systems continue working despite network issues but may return different views of data to different users. Strategies for sequencing messages in strongly and eventually - consistent systems are described in the next two subsections. + consistent systems are described in the next two subsections. Most + Delivery Service will use the Strongly Consistent paradigm but this + remains a choice that can be handled in coordination with the client + and advertized in the KeyPackages. However, note that a malicious Delivery Service could also reorder messages or provide an inconsistent view to different users. The