DDOS Protection

As our regular users are aware we are a market focused on PGP and e2ee (end to end encryption). That means nobody can read messages between customers and vendors up until the point an order is disputed, in which case all parties will need to encrypt their messages with at least two keys: vendor (or customer) key and an assigned staff key. Staff needs to encrypt with both customer and vendor keys if they reply to a disputed order chat.

We are well aware many customer chats are either general nonsense or requesting answers already found in listing description, vendor bio or vendor reship/refund policy. Therefore vendors have a "Quick Replies" section under their account settings page. Over there they can set up generic answers to generic questions.

We expect our users (both customers and vendors) to have basic knowledge about PGP like how to encrypt a message, how to sign a message, how to encrypt a message to multiple recipients. We do not provide guides as they are all over the place but we expect our users to already know that before signing up. It's a bit complicated but ~99.5% get it right.

That being said vendor quick replies are not there to circumvent encryption requirements. It's much easier and much faster to encrypt a tracking number than setting up a quick reply, placing a tracking number there and sending it as plaintext.

Vendors trying to circumvent e2ee requirements will be banned without warning.

If you are unable or unwilling to correctly use PGP please use a different market, there are plenty to choose from. And no, we will never add autoencrypt.

The API is almost ready to be pushed to production, that will make your order management much easier.

Thank you for understanding.