Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Darkly)
  • No Skin
Collapse
Brand Logo
  1. Home
  2. FediCon
  3. FediCon/FOSSY 2026 Live Thread

FediCon/FOSSY 2026 Live Thread

Scheduled Pinned Locked Moved FediCon
fediconfossy
106 Posts 16 Posters 51 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • Beady Belle FanchannelP Beady Belle Fanchannel

    @julian @ariadne @benpate this is a semi-serious proposition, but given how complicated E2EE for groups is, I'm afraid if we open that can of worms it's gonna crowd out small implementations and make the entry barrier considerably higher if not unscalable

    Beady Belle FanchannelP This user is from outside of this forum
    Beady Belle FanchannelP This user is from outside of this forum
    Beady Belle Fanchannel
    wrote on last edited by
    #101

    @julian @ariadne @benpate another thing I just thought about: how do you do moderation if the server can't verify the message content of a reported DM? I'm sure there is a crazy homomorphic encryption thing that makes it possible in theory, but has it ever been done?

    Ben Pate 🤘🏻B 1 Reply Last reply
    0
    • Beady Belle FanchannelP Beady Belle Fanchannel

      @julian @ariadne @benpate this is a semi-serious proposition, but given how complicated E2EE for groups is, I'm afraid if we open that can of worms it's gonna crowd out small implementations and make the entry barrier considerably higher if not unscalable

      Ben Pate 🤘🏻B This user is from outside of this forum
      Ben Pate 🤘🏻B This user is from outside of this forum
      Ben Pate 🤘🏻
      wrote on last edited by
      #102

      Lots here, I’ll try to answer in 500chars 🥸

      This is a valid concern that I’m pushing to be considered. Fortunately, the server implementation is pretty simple (as you’d hope for E2EE)

      We’re leaning on C2S, betting client apps will interop with servers.

      Also, my client is built in layers, hoping it can be a common core that many could build on and extend.

      @Profpatsch @julian @ariadne

      1 Reply Last reply
      0
      • Beady Belle FanchannelP Beady Belle Fanchannel

        @julian @ariadne @benpate another thing I just thought about: how do you do moderation if the server can't verify the message content of a reported DM? I'm sure there is a crazy homomorphic encryption thing that makes it possible in theory, but has it ever been done?

        Ben Pate 🤘🏻B This user is from outside of this forum
        Ben Pate 🤘🏻B This user is from outside of this forum
        Ben Pate 🤘🏻
        wrote on last edited by
        #103

        There are options in the table. Details are still in the works, and I’m not certain of my own stance on this yet.

        One option: you don’t. Private messages are private, and you just leave the conversation or block someone you don’t want to talk to. Signal does this.

        There’s also a proposal to share messages HASHES with admins. They don’t see the content, but can verify the plaintext if it’s reported by recipients. Facebook does this (I think)

        @Profpatsch @julian @ariadne

        Beady Belle FanchannelP 1 Reply Last reply
        0
        • Ben Pate 🤘🏻B Ben Pate 🤘🏻

          There are options in the table. Details are still in the works, and I’m not certain of my own stance on this yet.

          One option: you don’t. Private messages are private, and you just leave the conversation or block someone you don’t want to talk to. Signal does this.

          There’s also a proposal to share messages HASHES with admins. They don’t see the content, but can verify the plaintext if it’s reported by recipients. Facebook does this (I think)

          @Profpatsch @julian @ariadne

          Beady Belle FanchannelP This user is from outside of this forum
          Beady Belle FanchannelP This user is from outside of this forum
          Beady Belle Fanchannel
          wrote on last edited by
          #104

          @benpate @julian @ariadne uh so I'll just assume people won't send CSAM?

          Ben Pate 🤘🏻B 1 Reply Last reply
          0
          • Beady Belle FanchannelP Beady Belle Fanchannel

            @benpate @julian @ariadne uh so I'll just assume people won't send CSAM?

            Ben Pate 🤘🏻B This user is from outside of this forum
            Ben Pate 🤘🏻B This user is from outside of this forum
            Ben Pate 🤘🏻
            wrote on last edited by
            #105

            That’s one of many things being worked out now. And, something I know the Mastodon team has been interested in during the W3C meetings.

            And, there are many ways to address this. For instance, my implementation limits who has the ability to send encrypted messages. That’s how I was able to disable E2EE on my servers in the meantime. So in theory, advance could only allow encrypted messages from people they know and trust.

            @Profpatsch @julian @ariadne

            1 Reply Last reply
            0
            • R AodeRelay shared this topic on
            • william ⁂ maggosW This user is from outside of this forum
              william ⁂ maggosW This user is from outside of this forum
              william ⁂ maggos
              wrote on last edited by
              #106

              @julian @tchambers

              I feel like all the sites and services that help make the fedi better should be organized under the Social Web Foundation but in such a way that they could be rebuilt/replicated if somehow the SWF version crashed or went evil.

              1 Reply Last reply
              1
              0

              Hello! It looks like you're interested in this conversation, but you don't have an account yet.

              Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

              With your input, this post could be even better 💗

              Register Login
              Reply
              • Reply as topic
              Log in to reply
              • Oldest to Newest
              • Newest to Oldest
              • Most Votes


              • Login

              • Don't have an account? Register

              • Login or register to search.
              Powered by NodeBB Contributors
              • First post
                Last post
              0
              • Categories
              • Recent
              • Tags
              • Popular
              • World
              • Users
              • Groups