Re: End-to-end Encrypted Messaging in ActivityPub

so 20. 5. 2023 v 3:25 odesílatel Sean O'Brien <sean.obrien@yale.edu> napsal:

> I second Evan's proposal. We need simple PGP-style key exchange for DMs.
> In my opinion, it's rather embarrassing that the hundreds of thousands of
> users who flocked to the fediverse did not have such an option.
>
> I like and use Nostr, but it's heavily entrenched in cryptocurrency and
> the Lightning Network, by design.
>

It's fantastic to see you embracing Nostr, a platform designed to be
independent of any cryptocurrencies, the only mandatory NIP is that
messages are in JSON with signatures. However, there's a substantial demand
for ethical payments in the social web, and that demand is being addressed
by the vibrant community that has first adopted Nostr. This mirrors
Facebook's early trajectory, starting with a niche community before
expanding.

The organic growth allows Nostr to develop and mature, aligning its
features with existing apps while remaining small and enjoyable. As it
matures, it is  anticipated that it will attract a broader audience.
Interestingly, developers transitioning from the Fediverse to Nostr have
noticed more action and less discussion there, reflecting a high-velocity
innovation environment.

Nostr, just about 6 months old, is supported by over a thousand grassroots
developers committed to free software, cryptography, and privacy. While the
platform could delegate holding user private keys to third parties (which
is the fedi model), it prioritizes privacy, at this point.

I foresee Nostr incorporating high-quality end-to-end encryption in the
coming year (I'm even developing one), ensuring both security and a
friendly user experience. It's an exciting time to witness and participate
in this wave of innovation.  Hopefully we can all learn from each other.


[image: image.png]



>
> Thanks Evan for your post, it's a good reminder that we have all the
> pieces and just need to assemble them.
>
> Cheers,
> - Sean
>
>
>
> On May 20, 2023 12:27:06 AM UTC, Melvin Carvalho <melvincarvalho@gmail.com>
> wrote:
>>
>>
>>
>> pá 19. 5. 2023 v 16:25 odesílatel Evan Prodromou <evan@prodromou.name>
>> napsal:
>>
>>> I published a blog post about an architecture for end-to-end encrypted
>>> messaging in ActivityPub:
>>>
>>>
>>> https://evanp.me/2023/05/19/end-to-end-encrypted-messages-over-activitypub/
>>>
>>> One option for this group is to publish Note documents. I think
>>> developing a standard mechanism for E2EE with multiple implementations
>>> could be a huge benefit for social web. I’d be happy to participate in such
>>> a subgroup!
>>>
>>
>> You might want to look at nostr.  Right now every user has a key pair.
>>
>> Generally this is used for signatures, but the keys in question can also
>> encrypt messages, and this is used quite often.
>>
>> For E2E you need a user to hold the keys, but that doesnt happen in AP
>> because servers hold the private keys of users, right now
>>
>>>
>>>
>>> Evan
>>>
>>