Spyke

Syndicated from the fediverse. Read and engage on the original instance.

View original on pawb.social

2 replies

Cy
fedicy.us.to

How do your users know which Public Key belongs to someone they want to communicate with?

Put it in their profile. Seriously that's it. You can use a profile metadata field if you want to be formal about it.

Why would you need a history of what keys were whose?

0

Your instance admin subtitutes the public key in your profile with one they control.

How do you stop this?

Like, half the point of E2EE for DMs is to prevent instance admins from seeing what your messages say. The other half is to prevent instance admins from being able to surrender anything useful to government subpoenas.

1

You reached the end

The Long Tail of Work Left Until ActivityPub Has E2EE - Dhole Moments | Spyke