3 ms·

Forget about what instance owners can do within the confines of the common Mastodon server codebase - Mastodon in the end is a protocol, so there are NO guarant

Forget about what instance owners can do within the confines of the common Mastodon server codebase - Mastodon in the end is a protocol, so there are NO guarantees about the behavior of individual instances. It seems like Mastodon assumes that misbehaving nodes will be cut off and just ignored by well-behaved ones - but that assumes that abuse is detectable and that standards of behavior will be enforced even if it means cutting off potentially large communities.

remram 4y ago
Whatever your software, the person running it can read your messages. Unless you're using a non-web client that does E2EE, of which there are none right now.
- LanternLight83 4y ago
  > a non-web client that does E2EE Yeah, I guess secure scuttlebutt comes to mind? But it's kinda it's own thing, notably with it's own scaling issues when it comes to widespread use.
- woojoo666 4y ago
  Does mastodon even support E2EE? If you want encrypted chat rooms, isn't that what Matrix is for
  - remram 4y ago
    The server has the bits to do it [1], but clients need to implement it (they are the "ends" in "end-to-end encryption" after all). However this hasn't seen much interest from app developers and users. [1]: https://github.com/mastodon/mastodon/pull/13820 https://github.com/mastodon/mastodon/pull/13820
- Drblessing 4y ago
  > non-web client that does E2EE Signal?
  - 411111111111111 4y ago
    Signal has a web client? Link please.
  - swores 4y ago
    Signal is a non-web app, but not (afaik?) a client for Mastodon.
ShroudedNight 4y ago
> It seems like Mastodon assumes that misbehaving nodes will be cut off and just ignored by well-behaved ones... A de novo Eris-free network?
nirui 4y ago
This is actually something to worry about. Most Mastodon instance are hosted by individuals. Granted, I would assume most people are hosting the service with good faith, but there is no binding way to ensure that. With Twitter, doing something feral will (at least was possible to bring) doom to the company and it's investment, which is far bigger balancing factor than just someone's honesty. I'm not promoting Twitter here, but for Mastodon, something needs to be done to protect the integrity of the content posted, so the admin cannot modify it easily (moderation can still be done through deletion).
- ispo 4y ago
  Investment is more balancing that honesty? Surely you meant something else?

remram 4y ago

Whatever your software, the person running it can read your messages. Unless you're using a non-web client that does E2EE, of which there are none right now.

LanternLight83 4y ago
> a non-web client that does E2EE Yeah, I guess secure scuttlebutt comes to mind? But it's kinda it's own thing, notably with it's own scaling issues when it comes to widespread use.
woojoo666 4y ago
Does mastodon even support E2EE? If you want encrypted chat rooms, isn't that what Matrix is for
- remram 4y ago
  The server has the bits to do it [1], but clients need to implement it (they are the "ends" in "end-to-end encryption" after all). However this hasn't seen much interest from app developers and users. [1]: https://github.com/mastodon/mastodon/pull/13820 https://github.com/mastodon/mastodon/pull/13820
Drblessing 4y ago
> non-web client that does E2EE Signal?
- 411111111111111 4y ago
  Signal has a web client? Link please.
- swores 4y ago
  Signal is a non-web app, but not (afaik?) a client for Mastodon.

ShroudedNight 4y ago

> It seems like Mastodon assumes that misbehaving nodes will be cut off and just ignored by well-behaved ones... A de novo Eris-free network?

nirui 4y ago

This is actually something to worry about. Most Mastodon instance are hosted by individuals. Granted, I would assume most people are hosting the service with good faith, but there is no binding way to ensure that. With Twitter, doing something feral will (at least was possible to bring) doom to the company and it's investment, which is far bigger balancing factor than just someone's honesty. I'm not promoting Twitter here, but for Mastodon, something needs to be done to protect the integrity of the content posted, so the admin cannot modify it easily (moderation can still be done through deletion).

ispo 4y ago
Investment is more balancing that honesty? Surely you meant something else?