The device-revocation guard consults the master-signed device list only for 1:1
contacts. Group members are created via ensureMemberContact without a
peerDeviceList, so a fan-out to a revoked device of a member is not blocked.
Comes with v3 / sender-keys or MLS. Executable target already in the repo:
tests/group-revocation.xfail.test.mjs.
The device-revocation guard consults the master-signed device list only for 1:1
contacts. Group members are created via
ensureMemberContactwithout apeerDeviceList, so a fan-out to a revoked device of a member is not blocked.Comes with v3 / sender-keys or MLS. Executable target already in the repo:
tests/group-revocation.xfail.test.mjs.