The media in this post is not displayed to visitors. To view it, please go to the original post.

*grumbles in admin* I dun wanna and never will read your damn dms.
in reply to dexiheart is anti-cop

@dexiheart is anti-cop @Aus.Social Admin I've been wondering about that. How can you possibly encrypt messages in such a way that admins with full access cannot access them? It would mean you can't store private keys on the server; every client you use to access it (mobile app, every browser) would need a copy of your private key. Or it's encrypted with your password, but then if you lose your password, you lose all your messages too.
in reply to Martijn Vos

@Martijn Vos @Aus.Social Admin @dexiheart is anti-cop it could in theory be done with a client, as that could store your keys on your own device (and you could in theory check that the client isn't doing anything harmful with those keys), but then only people who use mastodon through a compatible client could read those.

Or more easily one can use the DM/PMs on mastodon to exchange contact IDs for some system that is designed for private communications rather than mostly public ones and already provides cryptography (and a client/app to do in on the user's side).

in reply to Aus.Social Admin

Correct me if I'm wrong in my layperson's understanding, but isn't the issue with the privacy of ActivityPub messages fairly analogous to the privacy of unencrypted email? That is, in the process of routing a message to its intended destination, every server along its path will download a copy?

I'm not asking to imply "and therefore we shouldn't strive for more," I'm just wondering if the issues are analogous.

in reply to Spencer

@Spencer @Aus.Social Admin It's slightly better than the privacy of unencrypted email, because unencrypted email is sent over the internet unencrypted, whereas ActivityPub messages at least use https.

Personally I think email should be upgraded to a system where every message is encrypted by default. Of course that would require knowing the recipient's public key, which would require a system to distribute those to everybody who has you as a contact, and before you know it, it has turned into a social network. But I think this is the way email has to go.

Questo sito utilizza cookie per riconosce gli utenti loggati e quelli che tornano a visitare. Proseguendo la navigazione su questo sito, accetti l'utilizzo di questi cookie.

⇧