For what it's worth, I think E2EE over ActivityPub is mostly a bad idea.
-
For what it's worth, I think E2EE over ActivityPub is mostly a bad idea.
You'd want your messages encrypted to hide them from your instance admin, but in most cases your instance admin also controls your client.
Plus, what are the odds they come up with a more safe implementation than Signal?
Scott Jenson (@scottjenson@social.coop)
#mastondon Friends! There is a TON of improvements we could make to Private Mentions (often called DMs on other platforms) e.g. * getting them out of the public timeline * Having a stronger notification tied to the Private Mention tab * (amount other things) But here is my MAIN question: How critical is it that these message are encrypted? I'm not against encryption! It's just complex and will take time. If we were to make some UX changes as a first pass WITHOUT encryption would you be OK with that (at least for now?) If you MUST have encryption, that's fine, please do me the favor of replying explaining why you need it.
social.coop (social.coop)
-
For what it's worth, I think E2EE over ActivityPub is mostly a bad idea.
You'd want your messages encrypted to hide them from your instance admin, but in most cases your instance admin also controls your client.
Plus, what are the odds they come up with a more safe implementation than Signal?
Scott Jenson (@scottjenson@social.coop)
#mastondon Friends! There is a TON of improvements we could make to Private Mentions (often called DMs on other platforms) e.g. * getting them out of the public timeline * Having a stronger notification tied to the Private Mention tab * (amount other things) But here is my MAIN question: How critical is it that these message are encrypted? I'm not against encryption! It's just complex and will take time. If we were to make some UX changes as a first pass WITHOUT encryption would you be OK with that (at least for now?) If you MUST have encryption, that's fine, please do me the favor of replying explaining why you need it.
social.coop (social.coop)
@fedilore@mastodon.social i mean, as an admin we think plausible deniability over the contents of user dms is valuable. even if its never as secure a platform as signal e2ee, if implemented reasonably, would be a great feature
