UMBRA
·
silent-failure
·
2 min read
A handshake can complete while carrying nothing. Our relay had been built in stages, and one stage — the branch that fetches a peer's pre-published one-time handshake key and forwards it to the requester — was still a stub. The stub…
UMBRA
·
verification-honesty
·
2 min read
This is the note about the day we caught ourselves testing the wrong party. The claim under test was that two peers behind different kinds of address translation could find each other and hold a direct session. The test passed, repeatedly,…
UMBRA
·
compatibility-planning
·
2 min read
Every roadmap wants to ship the interesting thing first. Ours could not, because the interesting thing was a cryptographic upgrade that invalidates every existing message shape at once: new key material, a new handshake, new frame variants.…
UMBRA
·
protocol-evolution
·
2 min read
Two nodes that must talk to each other cannot both be upgraded at the same instant, and a peer-to-peer fabric has no maintenance window in which the whole network is quiet. Every wire format we ship has to be readable by parties still…