End-to-end Encryption (E2EE) over ActivityPub
General Discussion
10
Posts
6
Posters
9
Views
-
End-to-end Encryption (E2EE) over ActivityPub
Encrypted direct messages supply the confidence that people need to connect with family, friends and colleagues privately over a social network. As part of the Summer of Protocols 2024, we explore the integration of end-to-end encryption (E2EE) into the ActivityPub protocol.
https://socialwebfoundation.org/program-protocol-e2ee/
#ActivityPub #E2EE #SocialWeb #Foundation #SocialWebFoundation #Encryption #Verschlüsselung #Sicherheit #Privatnachricht
-
End-to-end Encryption (E2EE) over ActivityPub
Encrypted direct messages supply the confidence that people need to connect with family, friends and colleagues privately over a social network. As part of the Summer of Protocols 2024, we explore the integration of end-to-end encryption (E2EE) into the ActivityPub protocol.
https://socialwebfoundation.org/program-protocol-e2ee/
#ActivityPub #E2EE #SocialWeb #Foundation #SocialWebFoundation #Encryption #Verschlüsselung #Sicherheit #Privatnachricht
@sozialwelten It's 2025 now, and there are no tangible results.
-
@sozialwelten It's 2025 now, and there are no tangible results.
@raucao It is also not a part of the official Mastodon Roadmap even though there are some open issues in the GitHub repository concerning E2EE.
I personally hope that it will get integrated into ActivityPub and/or Mastodon but for 2026 and 2027 I do not see any signs that there is anything remotely close to being published.
#E2EE #Issues #Github: https://github.com/mastodon/mastodon/issues?q=is%3Aissue%20state%3Aopen%20e2ee
#Mastodon #Public #Roadmap: https://joinmastodon.org/roadmap -
@raucao It is also not a part of the official Mastodon Roadmap even though there are some open issues in the GitHub repository concerning E2EE.
I personally hope that it will get integrated into ActivityPub and/or Mastodon but for 2026 and 2027 I do not see any signs that there is anything remotely close to being published.
#E2EE #Issues #Github: https://github.com/mastodon/mastodon/issues?q=is%3Aissue%20state%3Aopen%20e2ee
#Mastodon #Public #Roadmap: https://joinmastodon.org/roadmap@sozialwelten @raucao
I searched for some progress information, and found this: https://www.w3.org/2024/09/25-e2ee-minutes.html -
@sozialwelten @raucao
I searched for some progress information, and found this: https://www.w3.org/2024/09/25-e2ee-minutes.html@koteisaev @sozialwelten There is zero progress in that, just a few people discussing what anyone interested in E2EE already knows.
-
@koteisaev @sozialwelten There is zero progress in that, just a few people discussing what anyone interested in E2EE already knows.
@koteisaev @sozialwelten FWIW, since Nostr identities are based on key pairs by design, and its developers care a bit more about privacy, E2EE DMs are already being tested via an MLS-based protocol there:
https://github.com/marmot-protocol/marmot
I think it's a shame that none of the large AP implementers are prioritizing this, because without user-owned keys, not just are DMs unencrypted, but there can be no true user sovereignty and account portability on the fediverse.
-
@koteisaev @sozialwelten FWIW, since Nostr identities are based on key pairs by design, and its developers care a bit more about privacy, E2EE DMs are already being tested via an MLS-based protocol there:
https://github.com/marmot-protocol/marmot
I think it's a shame that none of the large AP implementers are prioritizing this, because without user-owned keys, not just are DMs unencrypted, but there can be no true user sovereignty and account portability on the fediverse.
@raucao @koteisaev @sozialwelten the problem is, as always, key management. nostr has the advantage that people are already comfortable with handling cryptographic keys. e2ee on AP doesn't make much sense if people don't own their keys. -
@raucao @koteisaev @sozialwelten the problem is, as always, key management. nostr has the advantage that people are already comfortable with handling cryptographic keys. e2ee on AP doesn't make much sense if people don't own their keys.
-
@raucao @lain @sozialwelten @koteisaev FWIW, encryption with user-owned keys is on my roadmap. I don't want to start with MLS, though, it's too complex. The first prototype will likely encrypt messages with user's identity key, as described in https://codeberg.org/silverpill/feps/src/branch/main/0806/fep-0806.md
-
End-to-end Encryption (E2EE) over ActivityPub
Encrypted direct messages supply the confidence that people need to connect with family, friends and colleagues privately over a social network. As part of the Summer of Protocols 2024, we explore the integration of end-to-end encryption (E2EE) into the ActivityPub protocol.
https://socialwebfoundation.org/program-protocol-e2ee/
#ActivityPub #E2EE #SocialWeb #Foundation #SocialWebFoundation #Encryption #Verschlüsselung #Sicherheit #Privatnachricht
sozialwelten@ifwo.eu I apologize if my point of view may seem conservative and narrow-minded... but in my opinion, pushing for the integration of encrypted messaging into the Fediverse is not advisable. I believe the best solution is that of the Lemmy developers, who have created a button that allows two users with a Matrix account to communicate via software designed for secure communications.
Gli ultimi otto messaggi ricevuti dalla Federazione
-
@bojanlandekic@mastodon.social short answer is: snowflake IDs have a time-component to them, making them friendly for sharding and indexing. If you compress that into an alphanumeric string, you most likely loose the efficiency benefits. It's kinda like why you might see UUID primary keys not being recommended, when the standard UUID was UUIDv4 which had poor index & sharding efficiency, but with the newer UUIDv7, which are time sortable, you gain back that efficiency.
Basically randomness is the enemy of database performance, having stuff ordered by time in the primary key makes it easy for the database to know which pages of the database to look at, and which to ignore, as page files are created over time.
-
@stegodon wow
-
-
@schoenswetter @jnrs @stadtteilzentrum benutzt ihr beide die neuste version vom plugin? 7.8.5?
-
@schoenswetter @jnrs @stadtteilzentrum hmmm... das ist für ne bilderseite semioptimal!
wenn ihr mir beide eine beispiel URL schickt, schau ich mir das am Montag mal an!?
-
@jnrs @pfefferle @stadtteilzentrum Ich befürchte, das liegt an der Föderierungspolitik von Pixelfed selber. Bei meinem Blog hat alles gut funktioniert, aber dann habe ich mal den Provider gewechselt und seitdem gibt es eine Föderation der Beiträge überall im Fediverse nur nicht mehr auf Pixelfed. 🤷
-
@pfefferle @schoenswetter @stadtteilzentrum das wäre eben @stadtteilzentrum …auf mastodon kommen alle posts an, auf pixelfed bisher nur einer. Ich hätte gerade mal in den Einstellungen geguckt, aber dort nichts gefunden, was in meinen Augen dafür verantwortlich sein könnte ..vll hast Du ja ne Idee, ansonsten auch nicht so schlimm! Danke auf jeden Fall schonmal :)
-
@schoenswetter danke dir 😊
