Your instance admin subtitutes the public key in your profile with one they control.
How do you stop this?
Like, half the point of E2EE for DMs is to prevent instance admins from seeing what your messages say. The other half is to prevent instance admins from being able to surrender anything useful to government subpoenas.
1
The Long Tail of Work Left Until ActivityPub Has E2EE - Dhole Moments | Spyke
2 replies
Put it in their profile. Seriously that's it. You can use a profile metadata field if you want to be formal about it.
Why would you need a history of what keys were whose?
Your instance admin subtitutes the public key in your profile with one they control.
How do you stop this?
Like, half the point of E2EE for DMs is to prevent instance admins from seeing what your messages say. The other half is to prevent instance admins from being able to surrender anything useful to government subpoenas.