• The main SQLite store migrates from schema 29 to 36 on first start: portable friendships, a private message's reference and per-mailbox cursor, replies, reactions on chat lines and on stored private messages, and stubs of read messages. Forward-only, as before: take a backup first (docs/operating.md, "Backups"). The registrar's database is unchanged.

• A new secret, messaging-requests.key beside [inbox] db ([messaging] request_secret), is made owner-only on first start wherever [messaging] and [inbox] are configured, and one that cannot be read refuses the start. Back it up with the other keys. Each address's count of requests sent today starts over once.

• [messaging] max_message_bytes is now at most 65505, and twice request_messages messages of that size must fit a page of the classic wire's Get Message Requests; a config past either is refused at start. The defaults are well inside both.

• Get User Info shows a user's login and address only to that user and to a session holding disconnect_users; everyone else, the bootstrap guest included, reads - in their place.

• A private message to a login now reaches every attached session of the account but the sender's, rather than one of them.

• To an account taking part in messaging, a guest's message by login is now a message request, or refused where the account takes none.

• On the ng wire, a stored private message is named by ref, and id

...