A proximity session has a budget. Contact invites and share manifests fit. PDF scans usually do not—so attachments leave on a bulk plane after SDP exchange, not stuffed into every control frame.
If a proximity bootstrap can live in an ordinary https link, the authenticator has already toured browser history, referrers, and OS camera → URL launch paths.
Ciphertext and the secret that opens it should not travel as one convenient email. NT² splits carriers—file or link—from OOB passphrase delivery, and treats Strong as machine-handoff.
Estate and emergency access tempt products to hold a second key “just in case.” NT² refuses that oracle. Legacy is a sealed package on a delay—not a support console unlock.
After a share leaves your vault, “did they open it?” and “can I kill it?” are sender questions. The answers live in a local outbox—not a cloud mailbox of readable mail.
Your sister asked for the transfer details. You pasted a screenshot into the family LINE group—balance, nicknames, and last month’s transactions included.
The contractor finished the sprint six months ago. They are still in your Contacts list. That is not a crisis — but it is a reminder that trust should have an off switch.
Your accountant needs one disclosure once. Your co-founder needs keys all year. Your landlord needs to see digits on your phone, not your whole vault. Those are three different trust relationships — not three names for the same Share button.
You share rent details with your sister every month. You should not have to find her vault identity in a chat thread each time — or paste the wrong person by mistake.
The link opens in a browser. The content stays encrypted until the recipient enters a share passphrase you chose. That is a different habit from attaching a file.
Self-sovereign identity is useful when you take the parts that fit a zero-knowledge vault—and refuse the parts that turn the product into a general DID wallet.
A cloud can help deliver sealed packages without becoming the place where pending shares live as readable mail. Relay indexes ciphertext. Inbox stays on the device.
A share that opens with the same secret that unlocks the vault is not a handoff. It is a remote unlock of everything. NT² keeps those boundaries apart.
Every month you paste a banking-app screenshot into the family group. Your brother's phone, cloud backup, and search history are now copies you never meant to keep.