mirror of
https://github.com/sudosylabs/vnidrop.git
synced 2026-08-07 11:19:58 +02:00
An unreachable device is a delay, not a failure: the share stays here and the ticket waits in held_offers (schema 8 -> 9) until that device comes and collects it. No server and no push, per the design. Polling needs no grant proof. iroh has already authenticated the remote endpoint key, and a device is only handed offers addressed to precisely that endpoint, so a stranger polling learns nothing. Offers are consumed on delivery, so polling twice does not re-deliver, and cancelling the transfer withdraws the waiting ticket. Polling is rate limited per device: it tells every contact the app was opened, so it must never become a presence beacon.