Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone

I threw this up on Metafilter too, but why not here?

Uncategorized
139 78 159

Gli ultimi otto messaggi ricevuti dalla Federazione
  • I think some people were using PMs for potentially sensitive info (addresses, Venmo, etc.), and having them slightly more secure puts people at ease.

    What about standard public-key stuff, dropping a short public key in a metadata field, keeping the private key on the endpoint or in the client?
    read more

  • @scottjenson not at all critical.

    Hint: you could re-run this as a poll, for the question.

    read more

  • @evan the already improved UX looks good, to me.

    When drafting a reply to a public toot, the word 'Public' is prominent (first screenshot).

    When drafting a mention, the separation is clear (second shot).

    Without being blasé about privacy: if a person accidentally publishes in either of those contexts, it's human error.

    read more

  • @scottjenson

    And.. you probably know, but just in case:

    We have a solid spec for E2EE on the Fediverse now (https://swicg.github.io/activitypub-e2ee/mls) with and launching later this year.

    As you'd expect with end-to-end-encryption, *most* of the work is on the browser/client. The AP server changes are minimal: a new KeyPackage object to store, a new collection, & other small stuff.

    When we have working JS code, it'll be AGPL, and you could use it as a baseline for Mastodon 😎

    read more

  • @scottjenson I rarely use them due to the UX fears, encryption would be a cherry on top

    read more

  • @scottjenson And on encryption, I think you could probably launch with UX improvements only, and leave encryption as a "fast follow". E2EE might not be *critical* but it's a *super-nice-to-have* ~ especially on today's internet.

    The fact that we call them "direct messages" isn't enough; people have a natural expectation of privacy when they send DMs, and the Fediverse doesn't really honor that right now.

    The more systems we can make "secure by default" the better.

    read more

  • @scottjenson Hey Scott! I'm so glad you're tackling this issue. I have lots of trouble with DMs on Mastodon. I think you're addressing, these, but here goes:

    The biggest one is how easily they're confused with regular messages. I routinely mess this up, and make private messages public, or vice versa.

    The next is how hard it is to visualize threads - especially in the existing notification section. I often lose my place in complex discussions

    read more

  • @scottjenson I think making UX improvements to DMs is a great idea.

    One of the biggest privacy problems with Mastodon DMs now is that people accidentally make them public.

    Separating the private mention UI from the public posting UI will probably avoid a huge percentage of those user errors.

    It'd be a big win for privacy.

    read more
Post suggeriti