End-to-end encrypted DMs through ActivityPub will be available in the next release #HolosSocial
Uncategorized
8
Posts
5
Posters
3
Views
-
End-to-end encrypted DMs through ActivityPub will be available in the next release #HolosSocial
-
End-to-end encrypted DMs through ActivityPub will be available in the next release #HolosSocial
@HolosSocial What's a safety number?
-
@HolosSocial What's a safety number?
@negative12dollarbill
An optional security feature that lets you verify you're talking to the right person. Most users don't need this, your conversations are automatically encrypted and secure. -
End-to-end encrypted DMs through ActivityPub will be available in the next release #HolosSocial
I tried to use PGP over ActivityPub (tbh: over Mastodon) but quickly ran into the length limit. Even with very short content, PGP encrypted messages are always longer then 500 chars.
But it worked if I put the encrypted message into the ALT-Text of one or more images.
To have this native would be nice but hard to implement in browser apps I think.
-
I tried to use PGP over ActivityPub (tbh: over Mastodon) but quickly ran into the length limit. Even with very short content, PGP encrypted messages are always longer then 500 chars.
But it worked if I put the encrypted message into the ALT-Text of one or more images.
To have this native would be nice but hard to implement in browser apps I think.
@deusfigendi
That's why Holos uses Signal Protocol instead of PGP. We store the encrypted data in a custom ActivityPub field (signalCiphertext), not in the content field which has length limits. The content just shows a placeholder text. This avoids character limits while maintaining compatibility with existing servers. -
End-to-end encrypted DMs through ActivityPub will be available in the next release #HolosSocial
@HolosSocial is there any server with registration enabled?
It would be cool if I could try it out. -
@deusfigendi
That's why Holos uses Signal Protocol instead of PGP. We store the encrypted data in a custom ActivityPub field (signalCiphertext), not in the content field which has length limits. The content just shows a placeholder text. This avoids character limits while maintaining compatibility with existing servers.@HolosSocial @deusfigendi Since the custom field will be useless if the recipient doesn't support it anyway, wouldn't it be better to just create a custom type, like SignalMessage or something, instead of an extension of Note?
-
@HolosSocial @deusfigendi Since the custom field will be useless if the recipient doesn't support it anyway, wouldn't it be better to just create a custom type, like SignalMessage or something, instead of an extension of Note?
@Varpie
You're right, a dedicated type would be cleaner. We started with a Note extension for immediate compatibility, but we're planning to propose an EncryptedNote type through a FEP. Both approaches can coexist during the transition period. ActivityPub is designed to evolve through community proposals, we should contribute to that evolution.
@deusfigendi -
undefined oblomov@sociale.network shared this topic on
Feed RSS
Gli ultimi otto messaggi ricevuti dalla Federazione
-
@giuglionasi da ciò se ne evince una competenza una competenza profonda,direi a livello sub atom aehm... qual'è il numero atomico dello stronzioh?
-
Olimpiadi - Il presidente Fontana mostra come va indossato il casco da gara
#spinoza
-
-
@ballalloi @ed @Vi @oblomov c'è anche sshfs con cui puoi montare una directory di una macchina a cui hai accesso via ssh su una directory locale, e poi dovresti poterci scrivere con l'editor che vuoi
il comando è tipo ``sshfs macchina.remota:/path/della/directory/remota /path/della/directory/locale``
poi devi andare a confessarti per aver usato vscod(e|ium), ma lì sono fatti tra te e il tuo confessore e noi non vogliamo saperne :D
-
@oblomov @ballalloi comunque anche con vi il modo normale per incollare è selezionare con il mouse e poi fare click con il tasto centrale, e quello dovrebbe funzionare anche non nano
(con vi. come dio comanda. non con quell'abominio moderno di vim con il supporto per il mouse che fa casini :D )
-
After a lot of twists and turns, we finally landed in Doha.
-
@informapirata @lastknight@sociale.network @eticadigitale ma se genitori sono quei venti milioni di astenuti quale compito educativo possiamo suggerirgli?
-
Passa a Ghost! Substack conferma che la violazione dei dati colpisce gli indirizzi email e i numeri di telefono degli utenti
Substack ha confermato una violazione dei dati in un'e-mail agli utenti. L'azienda ha affermato che a ottobre una "terza parte non autorizzata" ha avuto accesso ai dati degli utenti, inclusi indirizzi e-mail, numeri di telefono e altri "metadati interni" non specificati.
