Knowledge base

Scoped visibility

One address means one address.

Details

Access is resolved on the server for every read, from the session rather than from anything the client sends.
The thread list is filtered to the addresses somebody reaches, and opening a single thread is re-checked against them. Those are the addresses and whole domains shared with them, or every address when their role reaches every address.
Switching an address off stops it receiving, and the people it is shared with still read what it holds. A password sign-in for that address is the exception: it stops working while the address is off, and works again once it is switched back on.