(Obligatory self post.) I normally don’t care enough to share my content but thought this post i wrote the other week would be of interest to this community.
Tldr from the conclusion:
- the messages sent to Lumo need to be able to be temporarily decrypted for Lumo to process them.
- Lumo’s response is generated as unencrypted text prior to be encrypted and sent back to you.
- portions of the conversation context (previous messages) get resent with each interaction.
https://proton.me/blog/lumo-security-model
They just published this FYI, and I found it very detailed and clear.