▲ 613 ▼ Federated End-to-End Encrypted Messaging is Coming Soon (wedistribute.org) submitted 7 months ago by deadsuperhero@lemmy.world to c/fediverse@lemmy.world 93 comments fedilink hide all child comments Important progress has been made regarding bringing MLS end-to-end encryption to the ActivityPub protocol, with developers already building implementations and providing feedback to a future version of the protocol spec.
[–] Abundance114@lemmy.world 26 points 7 months ago (4 children) I felt like a 90 year old grandma reading this. permalink fedilink source parent hideshow 4 child comments replies: [–] gajahmada@awful.systems 11 points 7 months ago* (last edited 7 months ago) (2 children) You and me both. But after pondering the orbs for a minute I think they're saying, that it's just Emissary trying to get E2EE working and not Fediverse as a whole. And they follow with some objection with the proposed draft. I can only comment on the 3rd one, it basically mean you need other channel of communication to manually compare fingerprint (i.e via Matrix/Signal) to make sure your activities on Emissary is actually encrypted, maybe lol. permalink fedilink source parent hideshow 2 child comments replies: [–] WhyJiffie@sh.itjust.works 1 point 7 months ago (1 child) but wouldn't you also need to verify the matrix/signal contact? both of them gives you the option to verify the other, but its very rarely used by people. so, you need either an already verified secure channel, or meeting on the street. but then again we don't actually know each other. so if we meet, how would you know it's actually me, and not someone impersonating me? permalink fedilink source parent hideshow 1 child comment replies: [–] gajahmada@awful.systems 1 point 7 months ago how would you know it's actually me, and not someone impersonating me? Well, yeah the assumption here is that we both already knew and trust each other IRL and you personally give me this contact info and the check is there to make sure I was actually connected to you. We as layman didn't do this but I would assumed someone who is a high profile target actually do this kinds of checks. permalink fedilink source parent [–] CMLVI@lemmy.world 2 points 7 months ago Fediverse and Linux have to be the most unholy tech union in existence. permalink fedilink source parent
[–] gajahmada@awful.systems 11 points 7 months ago* (last edited 7 months ago) (2 children) You and me both. But after pondering the orbs for a minute I think they're saying, that it's just Emissary trying to get E2EE working and not Fediverse as a whole. And they follow with some objection with the proposed draft. I can only comment on the 3rd one, it basically mean you need other channel of communication to manually compare fingerprint (i.e via Matrix/Signal) to make sure your activities on Emissary is actually encrypted, maybe lol. permalink fedilink source parent hideshow 2 child comments replies: [–] WhyJiffie@sh.itjust.works 1 point 7 months ago (1 child) but wouldn't you also need to verify the matrix/signal contact? both of them gives you the option to verify the other, but its very rarely used by people. so, you need either an already verified secure channel, or meeting on the street. but then again we don't actually know each other. so if we meet, how would you know it's actually me, and not someone impersonating me? permalink fedilink source parent hideshow 1 child comment replies: [–] gajahmada@awful.systems 1 point 7 months ago how would you know it's actually me, and not someone impersonating me? Well, yeah the assumption here is that we both already knew and trust each other IRL and you personally give me this contact info and the check is there to make sure I was actually connected to you. We as layman didn't do this but I would assumed someone who is a high profile target actually do this kinds of checks. permalink fedilink source parent
[–] WhyJiffie@sh.itjust.works 1 point 7 months ago (1 child) but wouldn't you also need to verify the matrix/signal contact? both of them gives you the option to verify the other, but its very rarely used by people. so, you need either an already verified secure channel, or meeting on the street. but then again we don't actually know each other. so if we meet, how would you know it's actually me, and not someone impersonating me? permalink fedilink source parent hideshow 1 child comment replies: [–] gajahmada@awful.systems 1 point 7 months ago how would you know it's actually me, and not someone impersonating me? Well, yeah the assumption here is that we both already knew and trust each other IRL and you personally give me this contact info and the check is there to make sure I was actually connected to you. We as layman didn't do this but I would assumed someone who is a high profile target actually do this kinds of checks. permalink fedilink source parent
[–] gajahmada@awful.systems 1 point 7 months ago how would you know it's actually me, and not someone impersonating me? Well, yeah the assumption here is that we both already knew and trust each other IRL and you personally give me this contact info and the check is there to make sure I was actually connected to you. We as layman didn't do this but I would assumed someone who is a high profile target actually do this kinds of checks. permalink fedilink source parent
[–] CMLVI@lemmy.world 2 points 7 months ago Fediverse and Linux have to be the most unholy tech union in existence. permalink fedilink source parent