Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone

Federated private groups (Announce vs Add)

Technical Discussion
6 3 7

Gli ultimi otto messaggi ricevuti dalla Federazione
  • @scottjenson In my opinion, encryption is moot as long as the behaviour of not having a distinction between “recipients” and “mentioned accounts” persists.
    @gracjan

    read more

  • > @silverpill@mitra.social said:
    >
    > Alternatively, they can start using Add instead of Announce, like we do. @julian Does that sound feasible?

    I personally have no problem with it (after all, I advocated in OP to just send both activities)

    But I know @nutomic@lemmy.ml will absolutely veto the discussion because it is a breaking change for the entire threadiverse, and he is not wrong.

    There is a third option... and that is to send a single multi-typed activity 🤣 maybe this is the turning point for adoption of multi type activities! (Of course I'm only half joking because I'm sure that'll be ruled breaking and unfeasible too.)

    cc @mario@hub.somaton.com

    read more

  • > @silverpill@mitra.social said:
    >
    > Your personal inbox still 404s but maybe the group inbox will work.

    Unrelated to the topic at hand there was a regression in the codebase for the past month that caused the inbox to return a 404 even with a valid content type header.

    I think that was the cause of the inbox 404

    read more

  • What’s up with delivery addressing being in both activities and objects? If my app publishes a nonpublic Create with different direct delivery targets than the created Object, what happens? What is supposed to happen? I know the spec recommends against it (suggests duplicating the addresses in both), but why was this considered a feature to allow? I think there should have been a non-AS2 envelope for addressing rather than embedding it (twice) into the content. You know, like email.

    read more

  • I hear you.

    I guess for me, I'm not going to use social media for that kind of thing, but I've exchanged snail mail addresses with online acquaintances and not sure if I would ever do that via the Fediverse with the current implementations.

    I can also see that in my head, my implementation would never have the private key server-side on a shared server, which would make it useless via the web. Honk and snac have spoiled me. But I could see having a private key in one of the mobile clients and never on a server.
    read more

  • @knapjack I understand where you are coming from. I might have agreed a few years ago. But encrypted messages need to be rock solid. Recently many governments the world over have shown they are more than willing to use the courts to subvert encrypted communications. Including forcing service providers like your friendly Masto admin to both hand over data and backdoor encryption.

    read more

  • @scottjenson

    I'm probably just one more vote on a "me too" pile, but it's not critical to me that social timeline 1:1 messaging be *encrypted*. It's important that I (the generic user) *understand* whether it is or isn't and behave accordingly.

    If you have to pick a focus, I do strongly prefer that 1:1 or 1:few comms have a distinct workflow apart from regular/public timeline appearances, though. It makes mishaps less likely, like forgetting or mis-clicking "private" in that dropdown.

    read more

  • @scottjenson I'm excited that you're asking this question!

    My preference is for usability improvements first. Other platforms already do encrypted private messages, and adding it won't make Mastodon easier to use. I think that's the core problem for the platform: removing barriers to sticking around without taking the cop-out of just copying what people are familiar with on other platforms.

    My primary use of private messages is to ask people for email or Signal addresses when I only know how to contact them on Mastodon.

    Secondary would occasionally be a “You OK?” message in reply to someone's post.

    Apart from those, I think of Mastodon as a public space. Private communication isn't what it's for, and the UI shouldn't centre it.

    read more
Post suggeriti
  • 0 Votes
    1 Posts
    9 Views
    I've just updated my #Snac instance, to version 2.85 👍 🎉You don't know Snac? But you should: https://codeberg.org/grunfink/snac2A simple, minimalistic and well documented #ActivityPub instance server written in C, no database needed, totally JavaScript-free, no cookies either, not much bullshit.Do you see this post? It comes from a Snac server.The Fediverse is larger than you assume 😉#snac2 #fediverse #frugalfediverse
  • 0 Votes
    1 Posts
    12 Views
    The Powered by #Pixelfed is lame af.This is not a #Cloudflare update btw.#ActivityPub #SocialMedia #News
  • ** ** *_* / /

    General Discussion gemini gopher guppy fediverse activitypub
    1
    0 Votes
    1 Posts
    11 Views
    ** ** *_* / /_____ ____ / /_(_) /__ / **/ ** \/ ** \/ **/ / //_// /_/ /_/ / /_/ / /_/ / ,< \__/\____/\____/\__/_/_/|_| tootik v0.19.9=> https://github.com/dimkr/tootiktootik is a federated nanoblogging service for the small internet.tootik allows people to participate in the fediverse using their Gemini, Gopher or Finger client of choice and makes the fediverse lighter, more private and more accessible. tootik's interface strips content to bare essentials (like text and links), puts the users in control of the content they see and tries to "slow down" the fediverse to make it more compatible with the slower pace of the small internet.It's a single executable that handles both the federation (using ActivityPub) and the frontend (using Gemini) aspects, while sqlite takes care of persistency. It should be lightweight and efficient enough to host a small community even on a cheap server, and hopefully, be easy to hack on.tootik implements only a small subset of ActivityPub, and probably doesn't really conform to the spec.Changelog:=> https://github.com/dimkr/tootik/releases/tag/v0.19.9#Gemini #Gopher #Guppy #Fediverse #ActivityPub
  • 0 Votes
    1 Posts
    18 Views
    Mastodon has a concept called "pinned statuses", which is a special collection attached to a Person actor. https://docs.joinmastodon.org/spec/activitypub/#featured It wasn't readily known how this collection is updated and federated (not without code achaeology), but claire@social.sitedethib.com recently shared some additional info :smiley: The actor itself will issue an Add activity targeting the collection with the status in object. This activity is sent to all followers of the actor. No activity is sent if the actor has no remote followers. A Remove is sent when a pinned post is unpinned. This is what the Add looks like: { "@context": "https://www.w3.org/ns/activitystreams", "type": "Add", "actor": "https://example.org/users/testUser", "target": "https://example.org/users/testUser/collections/featured", "object": "https://example.org/users/testUser/statuses/115266412340579560" } The corresponding Remove is identical except for type, which is of course, Remove.