Re: End-to-end Encrypted Messaging in ActivityPub

I second Evan's proposal. We need simple PGP-style key exchange for DMs. In my opinion, it's rather embarrassing that the hundreds of thousands of users who flocked to the fediverse did not have such an option.

I like and use Nostr, but it's heavily entrenched in cryptocurrency and the Lightning Network, by design.

Thanks Evan for your post, it's a good reminder that we have all the pieces and just need to assemble them.

Cheers,
- Sean



On May 20, 2023 12:27:06 AM UTC, Melvin Carvalho <melvincarvalho@gmail.com> wrote:
>pá 19. 5. 2023 v 16:25 odesílatel Evan Prodromou <evan@prodromou.name>
>napsal:
>
>> I published a blog post about an architecture for end-to-end encrypted
>> messaging in ActivityPub:
>>
>> https://evanp.me/2023/05/19/end-to-end-encrypted-messages-over-activitypub/
>>
>> One option for this group is to publish Note documents. I think developing
>> a standard mechanism for E2EE with multiple implementations could be a huge
>> benefit for social web. I’d be happy to participate in such a subgroup!
>>
>
>You might want to look at nostr.  Right now every user has a key pair.
>
>Generally this is used for signatures, but the keys in question can also
>encrypt messages, and this is used quite often.
>
>For E2E you need a user to hold the keys, but that doesnt happen in AP
>because servers hold the private keys of users, right now
>
>>
>>
>> Evan
>>