Revocation really is the hard edge here. Once someone decrypted the data, it’s game over. Reminds me of the PGP model from the 90s: strong guarantees, but sharing was always explicit and manual. I’m actually working on a project that helps people carve out independent digital space in authoritarian countries. Would really value it if you tried it and shared your thoughts