Re: Reconciling theory and in practice -- do the specs need updating?

• From: Marcus Rohrmoser <me+swicg@mro.name>
• Date: Sat, 04 Mar 2023 00:50:02 +0100
• To: public-swicg@w3.org
• Message-ID: <54AE1C48-C65D-4A6D-A2F8-1E8E619CEC5C@mro.name>

On 3 Mar 2023, at 23:45, Sean O'Brien wrote:

> I am very interested in the role of confidentiality and encryption, 
> and I know some work has been done by others in the community that 
> extends ActivityPub in that direction (for ex. the use of PGP keys). I 
> think it's vital to consider folding the appropriate components of 
> these proposals into updated specs.

I can't label it privacy if a 3rd party holds the key.

I see few benefit ActivityPub brings beyond tls.

However, huge dangers when confidential and public messages sit next to 
each other.

Marcus

Received on Friday, 3 March 2023 23:50:18 UTC