Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone

Federated private groups (Announce vs Add)

Technical Discussion
6 3 7

Gli ultimi otto messaggi ricevuti dalla Federazione
  • @scottjenson In my opinion, encryption is moot as long as the behaviour of not having a distinction between “recipients” and “mentioned accounts” persists.
    @gracjan

    read more

  • > @silverpill@mitra.social said:
    >
    > Alternatively, they can start using Add instead of Announce, like we do. @julian Does that sound feasible?

    I personally have no problem with it (after all, I advocated in OP to just send both activities)

    But I know @nutomic@lemmy.ml will absolutely veto the discussion because it is a breaking change for the entire threadiverse, and he is not wrong.

    There is a third option... and that is to send a single multi-typed activity 🤣 maybe this is the turning point for adoption of multi type activities! (Of course I'm only half joking because I'm sure that'll be ruled breaking and unfeasible too.)

    cc @mario@hub.somaton.com

    read more

  • > @silverpill@mitra.social said:
    >
    > Your personal inbox still 404s but maybe the group inbox will work.

    Unrelated to the topic at hand there was a regression in the codebase for the past month that caused the inbox to return a 404 even with a valid content type header.

    I think that was the cause of the inbox 404

    read more

  • What’s up with delivery addressing being in both activities and objects? If my app publishes a nonpublic Create with different direct delivery targets than the created Object, what happens? What is supposed to happen? I know the spec recommends against it (suggests duplicating the addresses in both), but why was this considered a feature to allow? I think there should have been a non-AS2 envelope for addressing rather than embedding it (twice) into the content. You know, like email.

    read more

  • I hear you.

    I guess for me, I'm not going to use social media for that kind of thing, but I've exchanged snail mail addresses with online acquaintances and not sure if I would ever do that via the Fediverse with the current implementations.

    I can also see that in my head, my implementation would never have the private key server-side on a shared server, which would make it useless via the web. Honk and snac have spoiled me. But I could see having a private key in one of the mobile clients and never on a server.
    read more

  • @knapjack I understand where you are coming from. I might have agreed a few years ago. But encrypted messages need to be rock solid. Recently many governments the world over have shown they are more than willing to use the courts to subvert encrypted communications. Including forcing service providers like your friendly Masto admin to both hand over data and backdoor encryption.

    read more

  • @scottjenson

    I'm probably just one more vote on a "me too" pile, but it's not critical to me that social timeline 1:1 messaging be *encrypted*. It's important that I (the generic user) *understand* whether it is or isn't and behave accordingly.

    If you have to pick a focus, I do strongly prefer that 1:1 or 1:few comms have a distinct workflow apart from regular/public timeline appearances, though. It makes mishaps less likely, like forgetting or mis-clicking "private" in that dropdown.

    read more

  • @scottjenson I'm excited that you're asking this question!

    My preference is for usability improvements first. Other platforms already do encrypted private messages, and adding it won't make Mastodon easier to use. I think that's the core problem for the platform: removing barriers to sticking around without taking the cop-out of just copying what people are familiar with on other platforms.

    My primary use of private messages is to ask people for email or Signal addresses when I only know how to contact them on Mastodon.

    Secondary would occasionally be a “You OK?” message in reply to someone's post.

    Apart from those, I think of Mastodon as a public space. Private communication isn't what it's for, and the UI shouldn't centre it.

    read more
Post suggeriti
  • 0 Votes
    1 Posts
    0 Views
    What’s up with delivery addressing being in both #activitypub activities and objects? If my app publishes a nonpublic Create with different direct delivery targets than the created Object, what happens? What is supposed to happen? I know the spec recommends against it (suggests duplicating the addresses in both), but why was this considered a feature to allow? I think there should have been a non-AS2 envelope for addressing rather than embedding it (twice) into the content. You know, like email.
  • 0 Votes
    19 Posts
    34 Views
    @dontblink grazie a te per il riscontro positivo
  • 0 Votes
    1 Posts
    12 Views
    Experimental support for multiple users landed with Ktistec release v2.4.15. "Experimental" means that it works for me, but hasn't seen enough testing for me to call it "ready for production". With that said, it's unlikely you'll lose your data.There are lots of intentional design decisions that fit my vision for Ktistec but may surprise you. Here they are:Every user is an administrator. That doesn't mean users have access to each other's posts and data, but it does mean all users have access to the shared parts of the site—they can change the site description, for example—and they can add new users. So only add people you trust.If you want to add another user, create an account for them and give them their username and password.  There is no self-registration. There are no invitations.Beyond adding a user, there is no support for user management. You can't even boot a user from your site. Users can delete themselves, however.There is no support for content moderation. Only add people you trust.TL;DR Multi-user support in Ktistec is suitable for small teams, families (biological or chosen), and your personal avatars. There are better tools for online communities.Here's the full set of changes:AddedAdd support for multiple user accounts.FixedHide attachments behind the summary. (fixes #125)Mark actors as up after refreshing their profile.#ktistec #fediverse #activitypub #crystallang
  • 0 Votes
    1 Posts
    17 Views
    Discovering new music over at Bandwagon, a federated platform for listeners and bands alike.Edited: Geez my spelling is atrocious latelyHere Come the Lucky Ones https://bandwagon.fm/681f978f86cc3075f1fa1089#Music #ActivityPub