2 ms·
Absolutely, I support E2E and signatures. It's funny that there is nothing new since GPG, it is decentralized identity with E2E encryption and verifiable signat
by Ciantic 4y ago
Absolutely, I support E2E and signatures. It's funny that there is nothing new since GPG, it is decentralized identity with E2E encryption and verifiable signatures. But original poster was questioning the delivery mechanism. Given that there is no E2E, it already works as efficiently as it can with pub/sub.
I don't want to start discussing what Fediverse should be, but I have had this discussion in past, few points:
- ActivityPub has two signatures: HTTP signatures, which are ephemeral, and more persistent JSON-LD object signatures. They are contentious. Some servers disable JSON-LD object signatures, because they allow to proof cryptographically that someone posted something, thus deleted posts become "liability".
- E2E encryption will have similar ramifications, because not all servers agree that crypto be used.
Currently only way to do "privacy" is to deliver messages to just the people you want, and hope servers won't send them to third parties, like in email. That's what Mastodon does.